CVE-2010-2239

Published: Aug 19, 2010Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:S/C:C/I:N/A:N

Exploitability: 2.7 / Impact: 6.9

Source: NVD

Description

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Affected (17)

Products: Libvirt: Libvirt

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Libvirt Libvirt	Version 0.6.0
Libvirt Libvirt	Version 0.6.1
Libvirt Libvirt	Version 0.6.2
Libvirt Libvirt	Version 0.6.3
Libvirt Libvirt	Version 0.6.4
Libvirt Libvirt	Version 0.6.5
Libvirt Libvirt	Version 0.7.0
Libvirt Libvirt	Version 0.7.1
Libvirt Libvirt	Version 0.7.2
Libvirt Libvirt	Version 0.7.3
Libvirt Libvirt	Version 0.7.4
Libvirt Libvirt	Version 0.7.5
Libvirt Libvirt	Version 0.7.6
Libvirt Libvirt	Version 0.7.7
Libvirt Libvirt	Version 0.8.0
Libvirt Libvirt	Version 0.8.1
Libvirt Libvirt	Version 0.8.2

Related CWEs

References (22)

http://libvirt.org/news.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1008-1

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1008-2

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1008-3

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0615.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2062

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2763

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=607812

Source: secalert@redhat.com

http://libvirt.org/news.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://ubuntu.com/usn/usn-1008-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://ubuntu.com/usn/usn-1008-2

Source: af854a3a-2127-422b-91ae-364da2661108

http://ubuntu.com/usn/usn-1008-3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0615.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2763

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=607812

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.