NetSight
IP …
medium4.4

CVE-2010-2238

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might al…

Impact

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected products

VendorProductAffected versions
LibvirtLibvirt
Versions 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7

Weakness classification

CWE-264

References