CVE-2010-0430: Buffer Overflow
Izik Eidus found a bug in QEMU that allows priviledged guest user to control the address Cairo library uses to map it's memory and and therefore the guest can read/write into the whole QEMU address space.
Other sources
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-0430?
CVE-2010-0430 has a medium severity rating due to its potential to allow unauthorized access to guest OS memory.
How do I fix CVE-2010-0430?
To fix CVE-2010-0430, update to the patched versions of kvm (0:83-164.el5) or rhev-hypervisor (0:5.5-2.2.4.2.el5) as recommended by Red Hat.
What products are affected by CVE-2010-0430?
CVE-2010-0430 affects libspice used in QEMU-KVM within Red Hat Enterprise Virtualization Hypervisor prior to version 5.5-2.2.
Can CVE-2010-0430 be exploited remotely?
Yes, CVE-2010-0430 can be exploited remotely by guest OS users if the vulnerability is present.
What are the potential consequences of CVE-2010-0430 exploitation?
Exploitation of CVE-2010-0430 could allow guest OS users to read or write arbitrary QEMU memory, leading to data exposure or system instability.