PT-2010-3838 · Red Hat · Libvirt+1

Jeremy Nickurak · Published 2010-08-10 · Updated 2024-06-15 · CVE-2010-2242

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat libvirt versions 0.2.0 through 0.8.2

Description The issue allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values. This can be demonstrated by copying and deleting an NFS directory tree, exploiting improper mappings of privileged source ports in iptables rules.

Recommendations For Red Hat libvirt versions 0.2.0 through 0.8.2, consider restricting access to privileged source ports to minimize the risk of exploitation. As a temporary workaround, restrict the use of iptables rules that map privileged source ports until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2242

OPENSUSE-SU-2024:10209-1

RHSA-2010:0615

RHSA-2010_0615

Affected Products

Red Hat

Libvirt

References · 52

• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Vendor Advisory
• http://libvirt.org/news.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2242 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2242 · Vendor Advisory
• http://ubuntu.com/usn/usn-1008-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• http://ubuntu.com/usn/usn-1008-3 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0615.html · Vendor Advisory
• http://ubuntu.com/usn/usn-1008-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2242 · Security Note
• http://vupen.com/english/advisories/2010/2062 · Vendor Advisory
• https://suse.com/security/cve/CVE-2013-6456 · Note