Published: 24/08/2010 Updated: 25/08/2010

CVSS v2 Base Score: 6.6 | Impact Score: 10 | Exploitability Score: 2.7

VMScore: 587

Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C

libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise virtualization 2.2
redhat qspice 0.3.0

Synopsis Important: qspice security update Type/Severity Security Advisory: Important Topic Updated qspice packages that fix two security issues are now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerability S ...

Synopsis Important: rhev-hypervisor security and bug fix update Type/Severity Security Advisory: Important Topic Updated rhev-hypervisor packages that fix multiple security issues and twobugs are now availableThe Red Hat Security Response Team has rated this update as havingimportant security impact Commo ...

CWE-20 https://rhn.redhat.com/errata/RHSA-2010-0622.html https://rhn.redhat.com/errata/RHSA-2010-0633.html https://bugzilla.redhat.com/show_bug.cgi?id=568699 https://access.redhat.com/errata/RHSA-2010:0633 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-0428

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect