PT-2010-3838 · Red Hat · Libvirt+1

Jeremy Nickurak · Publicado 2010-08-10 · Atualizado 2024-06-15 · CVE-2010-2242

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat libvirt versions 0.2.0 through 0.8.2

Description The issue allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values. This can be demonstrated by copying and deleting an NFS directory tree, exploiting improper mappings of privileged source ports in iptables rules.

Recommendations For Red Hat libvirt versions 0.2.0 through 0.8.2, consider restricting access to privileged source ports to minimize the risk of exploitation. As a temporary workaround, restrict the use of iptables rules that map privileged source ports until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2242

OPENSUSE-SU-2024:10209-1

RHSA-2010:0615

RHSA-2010_0615

Produtos afetados

Red Hat

Libvirt

Referências · 52

• https://suse.com/security/cve/CVE-2013-6456 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4153 · Nota
• https://suse.com/security/cve/CVE-2014-3657 · Nota
• https://suse.com/security/cve/CVE-2011-2511 · Nota
• https://suse.com/security/cve/CVE-2014-1447 · Nota
• https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943 · Nota
• https://suse.com/security/cve/CVE-2013-6458 · Nota
• http://libvirt.org/news.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5247 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2242 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-2242 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-1008-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4154 · Nota
• https://suse.com/security/cve/CVE-2013-2218 · Nota