CVE-2010-2238
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Red Hat libvirt递归到提取原始格式磁盘的备份存储器，Guest用户可以借助未知向量读取主机操作系统上的任意文件，并可能引起其他未明影响。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-2238
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Libvirt磁盘备份后备存储器权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Red Hat libvirt递归到提取原始格式磁盘的备份存储器，Guest用户可以借助未知向量读取主机操作系统上的任意文件，并可能引起其他未明影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-2238
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-2238
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-2238 (5)
-
https://bugzilla.redhat.com/show_bug.cgi?id=607811 x_refsource_CONFIRM
-
-
-
-
Mailing List Discussions for CVE-2010-2238 (3)
-
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html vendor-advisory x_refsource_SUSE
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html vendor-advisory x_refsource_FEDORA
Other References for CVE-2010-2238 (1)
-
http://libvirt.org/news.html x_refsource_MISC
Same Patch Batch · n/a · 2010-08-19 · 24 CVEs total
| CVE-2010-2500 | FreeType 输入验证错误漏洞 | |
| CVE-2010-3054 | FreeType Standard Encoding Accented Character输入验证漏洞 | |
| CVE-2010-3053 | FreeType 'bdf/bdflib.c'资源管理错误漏洞 | |
| CVE-2010-2813 | SquirrelMail 'functions/imap_general.php'资源管理错误漏洞 | |
| CVE-2010-2808 | FreeType 缓冲区错误漏洞 | |
| CVE-2010-2807 | FreeType 'src/base/ftobjs.c' Mac_Read_POST_Resource函数数字错误漏洞 | |
| CVE-2010-2806 | FreeType 输入验证错误漏洞 | |
| CVE-2010-2805 | FreeType 'base/ftstream.c' FT_Stream_EnterFrame函数输入验证错误漏洞 | |
| CVE-2010-2541 | FreeType ftmulti演示程序'ftmulti.c'缓冲区错误漏洞 | |
| CVE-2010-2527 | FreeType演示程序多个缓冲区错误漏洞 | |
| CVE-2010-2520 | FreeType 'truetype/ttinterp.c'缓冲区错误漏洞 | |
| CVE-2010-2519 | FreeType 缓冲区错误漏洞 | |
| CVE-2010-1386 | Apple WebKit WebCore 'page/Geolocation.cpp'权限许可和访问控制漏洞 | |
| CVE-2010-2499 | FreeType 'base/ftobjs.c'缓冲区错误漏洞 | |
| CVE-2010-2498 | FreeType 'pshinter/pshalgo.c'资源管理错误漏洞 | |
| CVE-2010-2497 | FreeType 数字错误漏洞 | |
| CVE-2010-2242 | Libvirt iptables规则权限许可和访问控制漏洞 | |
| CVE-2010-2239 | Libvirt新镜像创建权限许可和访问控制漏洞 | |
| CVE-2010-2237 | Libvirt权限许可和访问控制漏洞 | |
| CVE-2010-2076 | Apache CXF输入验证错误漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-2238
No comments yet