6.6
CVSSv2

CVE-2010-0431

Published: 24/08/2010 Updated: 25/08/2010
CVSS v2 Base Score: 6.6 | Impact Score: 10 | Exploitability Score: 2.7
VMScore: 587
Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Summary

QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat enterprise virtualization 2.2

redhat kvm 83

Vendor Advisories

Synopsis Important: kvm security and bug fix update Type/Severity Security Advisory: Important Topic Updated kvm packages that fix three security issues and multiple bugs arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impa ...
Synopsis Important: rhev-hypervisor security and bug fix update Type/Severity Security Advisory: Important Topic Updated rhev-hypervisor packages that fix multiple security issues and twobugs are now availableThe Red Hat Security Response Team has rated this update as havingimportant security impact Commo ...