PT-2010-2197 · Red Hat · Qemu-Kvm+3

Izik Eidus + 1 · Published 2010-08-19 · Updated 2010-08-25 · CVE-2010-0429

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libspice versions as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 qspice version 0.3.0

Description The issue is related to the improper restriction of addresses for memory-management actions, which can be exploited by guest OS users. This can lead to a denial of service, causing the guest OS to crash, or potentially allow users to gain privileges via unspecified vectors.

Recommendations For libspice as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, consider restricting memory-management actions to authorized addresses until a patch is available. For qspice version 0.3.0, restrict access to memory-management functions to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0429

RHSA-2010:0622

RHSA-2010:0633

RHSA-2010_0633

Affected Products

Qemu-Kvm

Red Hat

Libspice

Qspice

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-0429 · Security Note
• https://rhn.redhat.com/errata/RHSA-2010-0633.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0622.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2010-0428 · Note
• https://access.redhat.com/security/cve/CVE-2010-0429 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=568701 · Note
• https://access.redhat.com/errata/RHSA-2010:0633 · Note