CVE-2010-0429
published 2010-08-24CVE-2010-0429: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly…
PriorityP422medium6.6CVSS 2.0
AVLACMAuSCCICAC
EPSS
0.31%
23.1th percentile
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | spice | — | — |
| redhat | enterprise_virtualization | — | — |
| redhat | qspice | — | — |
CVSS provenance
nvdv2.06.6MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
vendor_debian6.6LOW
vendor_redhat6.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libspice: Relying on guest provided data structures to indicate memory allocation
vendor_redhat·2010-08-19·CVSS 6.6
CVE-2010-0429 [MEDIUM] libspice: Relying on guest provided data structures to indicate memory allocation
libspice: Relying on guest provided data structures to indicate memory allocation
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Debian
CVE-2010-0429: spice - libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat...
vendor_debian·2010·CVSS 6.6
CVE-2010-0429 [MEDIUM] CVE-2010-0429: spice - libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat...
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-mf73-m82g-g4hv: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2
ghsa_unreviewed·2022-05-02
CVE-2010-0429 [MEDIUM] GHSA-mf73-m82g-g4hv: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
No detection rules found.
No public exploits indexed.
2010-08-24
Published