CVE-2011-2178

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-2178
The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.

4.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:S/C:C/I:N/A:N

Exploitability : 2.7 / Impact : 6.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://libvirt.org/news.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html
http://lists.opensuse.org/opensuse-updates/2011-06/msg00030.html
http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2178.html
http://www.ubuntu.com/usn/USN-1152-1
https://bugzilla.redhat.com/show_bug.cgi?id=709769 Patch
https://bugzilla.redhat.com/show_bug.cgi?id=709775
https://www.redhat.com/archives/libvir-list/2011-May/msg01935.html Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:libvirt:0.8.8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:libvirt:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:libvirt:0.9.1:*:*:*:*:*:*:*
History

07 Nov 2023, 02:07

Type Values Removed Values Added
Summary The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression. The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.

13 Feb 2023, 04:30

Type Values Removed Values Added
Summary The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression. The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.
Information

Published : 2011-08-10 20:55

Updated : 2023-12-10 11:03

NVD link : CVE-2011-2178

Mitre link : CVE-2011-2178

CVE.ORG link : CVE-2011-2178

JSON object : View

Products Affected

redhat

  • libvirt
CWE
NVD-CWE-Other