CVE-2010-2784
published 2010-08-24CVE-2010-2784: The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red…
PriorityP423medium6.6CVSS 2.0
AVLACMAuSCCICAC
EPSS
0.28%
19.7th percentile
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_virtualization | — | — |
| redhat | kvm | — | — |
CVSS provenance
nvdv2.06.6MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
vendor_redhat6.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
qemu: insufficient constraints checking in exec.c:subpage_register()
vendor_redhat·2010-07-28·CVSS 6.6
CVE-2010-2784 [MEDIUM] qemu: insufficient constraints checking in exec.c:subpage_register()
qemu: insufficient constraints checking in exec.c:subpage_register()
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Package: qemu-kvm (Red Hat Enterprise Linux 6) - Not affected
GHSA
GHSA-46g8-g627-3wh5: The subpage MMIO initialization functionality in the subpage_register function in exec
ghsa_unreviewed·2022-05-17
CVE-2010-2784 [MEDIUM] GHSA-46g8-g627-3wh5: The subpage MMIO initialization functionality in the subpage_register function in exec
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://www.spinics.net/lists/kvm/msg39173.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=619411https://rhn.redhat.com/errata/RHSA-2010-0622.htmlhttps://rhn.redhat.com/errata/RHSA-2010-0627.htmlhttp://www.spinics.net/lists/kvm/msg39173.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=619411https://rhn.redhat.com/errata/RHSA-2010-0622.htmlhttps://rhn.redhat.com/errata/RHSA-2010-0627.html
2010-08-24
Published