CVE-2010-2237
First published: Thu Jun 24 2010(Updated: )
It was found that libvirt did not honour the user defined main disk format in guest XML when looking up disk backing stores in the security drivers. This could be possibly exploited by priviledged guest user to access arbitrary files on the host.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libvirt Libvirt | =0.7.3 | |
| Libvirt Libvirt | =0.8.1 | |
| Libvirt Libvirt | =0.7.0 | |
| Libvirt Libvirt | =0.6.1 | |
| Libvirt Libvirt | =0.8.0 | |
| Libvirt Libvirt | =0.6.5 | |
| Libvirt Libvirt | =0.7.1 | |
| Libvirt Libvirt | =0.6.2 | |
| Libvirt Libvirt | =0.7.6 | |
| Libvirt Libvirt | =0.7.4 | |
| Libvirt Libvirt | =0.6.4 | |
| Libvirt Libvirt | =0.7.7 | |
| Libvirt Libvirt | =0.7.5 | |
| Libvirt Libvirt | =0.7.2 | |
| Libvirt Libvirt | =0.6.3 | |
| Libvirt Libvirt | =0.8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html
- https://bugzilla.redhat.com/show_bug.cgi?id=607810
- http://libvirt.org/news.html
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://www.vupen.com/english/advisories/2010/2763
- http://ubuntu.com/usn/usn-1008-1
- http://ubuntu.com/usn/usn-1008-3
- http://ubuntu.com/usn/usn-1008-2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=613625
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-2237
- agent/tags
- agent/trending
- vendor/libvirt
- canonical/libvirt libvirt
- version/libvirt libvirt/0.7.3
- version/libvirt libvirt/0.8.1
- version/libvirt libvirt/0.7.0
- version/libvirt libvirt/0.6.1
- version/libvirt libvirt/0.8.0
- version/libvirt libvirt/0.6.5
- version/libvirt libvirt/0.7.1
- version/libvirt libvirt/0.6.2
- version/libvirt libvirt/0.7.6
- version/libvirt libvirt/0.7.4
- version/libvirt libvirt/0.6.4
- version/libvirt libvirt/0.7.7
- version/libvirt libvirt/0.7.5
- version/libvirt libvirt/0.7.2
- version/libvirt libvirt/0.6.3
- version/libvirt libvirt/0.8.2