CVE-2010-0428 — Improper Input Validation in Redhat Enterprise Virtualization

CWE-20 — Improper Input Validation6 documents6 sources
Severity
6.6MEDIUMNVD
EPSS
0.1%
top 84.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Enterprise VirtualizationRedhat Qspice
Timeline
PublishedAug 24
Latest updateMay 2

Description

libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 2.7 | Impact: 10.0

Affected Packages2 packages

▶NVDredhat/qspice0.3.0

Patches

Patch: rhn.redhat.com ↗Patch: rhn.redhat.com ↗Patch: rhn.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xh85-x2mp-5m6p: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2↗2022-05-02
▶
CVEList
CVE-2010-0428: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2↗2010-08-24
▶

📋Vendor Advisories

2
Red Hat
libspice: Insufficient guest provided pointers validation↗2010-08-19
▶
Debian
CVE-2010-0428: spice - libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-0428 libspice: Insufficient guest provided pointers validation↗2010-02-26
▶