| Vulnerability Name: | CVE-2010-2238 (CCN-60660) | ||||||||||||||||||||||||||||
| Assigned: | 2010-07-27 | ||||||||||||||||||||||||||||
| Published: | 2010-07-27 | ||||||||||||||||||||||||||||
| Updated: | 2010-10-30 | ||||||||||||||||||||||||||||
| Summary: | Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors. | ||||||||||||||||||||||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||||||||||||||||||||||
| CVSS v2 Severity: | 4.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:N/A:N) 3.3 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:N/A:N/E:U/RL:TF/RC:C)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:TF/RC:C)
| ||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-264 | ||||||||||||||||||||||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2010-2238 Source: CCN Type: libvirt Web site libvirt: The virtualization API Source: CCN Type: libvirt GIT Repository libvirt.org Git - libvirt.git/summary Source: MISC Type: Vendor Advisory http://libvirt.org/news.html Source: FEDORA Type: UNKNOWN FEDORA-2010-10960 Source: FEDORA Type: UNKNOWN FEDORA-2010-11021 Source: SUSE Type: UNKNOWN SUSE-SR:2010:017 Source: CCN Type: SA40758 libvirt iptables Rules and Disk Format Security Bypass Source: UBUNTU Type: UNKNOWN USN-1008-1 Source: UBUNTU Type: UNKNOWN USN-1008-2 Source: UBUNTU Type: UNKNOWN USN-1008-3 Source: CCN Type: OSVDB ID: 67298 libvirt on Red Hat Linux Disk Backing-store Format Disk-image Backing Stores Recursion Guest OS Arbitrary File Access Source: CCN Type: OSVDB ID: 74559 libvirt security/security_manager.c virSecurityManagerGetPrivateData Function Off-by-one Arbitrary File Access Source: VUPEN Type: UNKNOWN ADV-2010-2763 Source: CCN Type: Red Hat Bugzilla Bug 607811 CVE-2010-2238 libvirt: ignoring defined disk backing store format when recursing into disk image backing stores Source: CONFIRM Type: UNKNOWN https://bugzilla.redhat.com/show_bug.cgi?id=607811 Source: XF Type: UNKNOWN libvirt-disk-format-security-bypass(60660) Source: SUSE Type: SUSE-SR:2010:017 (java-1_4_2-ibm, sudo, libpng, php5, tgt, iscsitarget, aria2, pcsc-lite, tomcat5, tomcat6, lvm2, libvirt, rpm, libtiff, dovecot12) | ||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||