CVE-2010-0431
Severity
6.6MEDIUM
EPSS
0.1%
top 84.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 24
Latest updateMay 2
Description
QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
CVSS vector
AV:L/AC:M/C:C/I:C/A:CExploitability: 2.7 | Impact: 10.0