cbcvebase.
CVE-2012-2693
published 2012-06-17

CVE-2012-2693: libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which…

low3.7CVSS 3.1
AVLACHAuNCPIPAP
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

Affected

72 ranges· showing 25
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 0.9.12-1 (bookworm)libvirt 0.9.12-1 (bookworm)
redhatlibvirt<= 0.9.11
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt

CVSS provenance

nvd3.7LOWAV:L/AC:H/Au:N/C:P/I:P/A:P
osv3.7LOW