Unscored severity · published Dec 27, 2013
CVE-2010-0430
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to…
–
CVSS
0.5%
EPSS
No
On KEV
Description
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Enterprise Virtualization Hypervisor · Redhat
through 5.4-2.1 · source: NVD
Affected product
EV
Enterprise Virtualization Hypervisor
Redhat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0430
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2010-0271.html
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=568702
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0476.html
More from Enterprise Virtualization Hypervisor
7.5
CVE-2015-5201
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise…
7.5
CVE-2012-0877
PyXML: Hash table collisions CPU usage Denial of Service
–
CVE-2011-1576
The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise…
–
CVE-2010-2223
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing…