cbcvebase.
CVE-2010-2238
published 2010-08-19

CVE-2010-2238: Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might…

medium4.4CVSS 3.1
AVLACMAuSCCINAN
Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 0.9.1-2 (bookworm)libvirt 0.9.1-2 (bookworm)
debianlibvirt< libvirt 0.8.3-1 (bookworm)libvirt 0.8.3-1 (bookworm)
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
libvirtlibvirt——
redhatlibvirt——
redhatlibvirt——
redhatlibvirt——
redhatlibvirt>= 0 < 0.8.3-10.8.3-1
redhatlibvirt>= 0 < 0.9.1-20.9.1-2
redhatlibvirt>= 0 < 0.8.3-10.8.3-1
redhatlibvirt>= 0 < 0.9.1-20.9.1-2
redhatlibvirt>= 0 < 0.8.3-10.8.3-1
redhatlibvirt>= 0 < 0.9.1-20.9.1-2
redhatlibvirt>= 0 < 0.8.3-10.8.3-1
redhatlibvirt>= 0 < 0.9.1-20.9.1-2

CVSS provenance

nvd4.4MEDIUMAV:L/AC:M/Au:S/C:C/I:N/A:N
osv4.4MEDIUM