CVE-2010-0430

published 2013-12-27

CVE-2010-0430: libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products…

high 7.4 CVSS 3.1

AV A AC M Au S C C I C A C

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	spice	—	—
redhat	enterprise_virtualization_hypervisor	<= 5.4-2.1	—

CWE-119