CVE-2010-2784
First published: Thu Jul 29 2010(Updated: )
Description of the problem: It is possible that subpage mmio is registered over existing memory page. When this happens "memory" will have real memory address and not index into io_mem array so next access to the page will generate segfault. It is uncommon to have some part of a page to be accessed as memory and some as mmio, but qemu shouldn't crash even when guest does stupid things. So lets just pretend that the rest of the page is unassigned if guest configure part of the memory page as mmio. Public post: <a href="http://www.spinics.net/lists/kvm/msg39173.html">http://www.spinics.net/lists/kvm/msg39173.html</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Virtualization | =2.2 | |
| Red Hat KVM | =83 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-2784?
CVE-2010-2784 has a severity rating of medium due to the potential for segmentation faults.
How do I fix CVE-2010-2784?
To fix CVE-2010-2784, you should update to the latest version of the affected software as per the vendor's security advisories.
What is the impact of CVE-2010-2784?
The impact of CVE-2010-2784 includes possible application crashes and denial of service due to segmentation faults.
Which software is affected by CVE-2010-2784?
CVE-2010-2784 affects Red Hat Enterprise Virtualization 2.2 and Red Hat KVM 83.
How can I mitigate CVE-2010-2784?
Mitigation strategies for CVE-2010-2784 include monitoring for abnormal application behavior and applying the necessary updates promptly.
- collector/redhat-bugzilla
- alias/CVE-2010-2784
- agent/references
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/redhat
- canonical/red hat enterprise virtualization
- version/red hat enterprise virtualization/2.2
- canonical/red hat kvm
- version/red hat kvm/83