PT-2010-3824 · Red Hat · Red Hat Enterprise Virtualization Hypervisor

Petr Matousek · Published 2010-06-24 · Updated 2010-06-25 · CVE-2010-2223

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Hypervisor (RHEV-H or rhev-hypervisor) versions prior to 5.5-2.2

Description The issue allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine, due to improper VM post-zeroing after the removal of a virtual machine's data.

Recommendations For versions prior to 5.5-2.2, update to version 5.5-2.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2223

RHSA-2010:0473

RHSA-2010:0476

Affected Products

Red Hat Enterprise Virtualization Hypervisor

References · 6

• https://rhn.redhat.com/errata/RHSA-2010-0476.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0473.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2223 · Security Note
• http://securityfocus.com/bid/41044 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=604752 · Note
• http://securitytracker.com/id?1024137 · Note