Vulnerability in Libvirt

CVE-2010-2239

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

EPSS: 0.003 (25.0th percentile) — read the EPSS interpretation.

Affected products

  • Libvirt — versions 0.6.4, 0.7.1, 0.8.0
  • N/a — versions n/a

Weakness classification (CWE)

References