PT-2010-3824 · Red Hat · Red Hat Enterprise Virtualization Hypervisor

Petr Matousek · Publicado 2010-06-24 · Atualizado 2010-06-25 · CVE-2010-2223

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Hypervisor (RHEV-H or rhev-hypervisor) versions prior to 5.5-2.2

Description The issue allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine, due to improper VM post-zeroing after the removal of a virtual machine's data.

Recommendations For versions prior to 5.5-2.2, update to version 5.5-2.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2223

RHSA-2010:0473

RHSA-2010:0476

Produtos afetados

Red Hat Enterprise Virtualization Hypervisor

Referências · 6

• http://securityfocus.com/bid/41044 · Nota
• https://rhn.redhat.com/errata/RHSA-2010-0476.html · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2010-0473.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=604752 · Nota
• http://securitytracker.com/id?1024137 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2223 · Nota de Segurança