Unscored severity · published Aug 24, 2010
CVE-2010-2811
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to…
–
CVSS
1%
EPSS
No
On KEV
Description
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service (daemon outage) via crafted SSL traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Enterprise Virtualization · Redhat
2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2811
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2811
securitytracker.com
http://securitytracker.com/id?1024347
www.securityfocus.com
http://www.securityfocus.com/bid/42580
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=622928
Patch
https://rhn.redhat.com/errata/RHSA-2010-0622.html
Patch
https://rhn.redhat.com/errata/RHSA-2010-0628.html
More from Enterprise Virtualization
9.8
CVE-2018-1117
ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently…
9.8
CVE-2013-1591
Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors
7.5
CVE-2015-5201
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise…
7.5
CVE-2018-1111
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP…
7.2
CVE-2018-1074
ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to…