Unscored severity · published Jun 17, 2012
CVE-2012-2693
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong…
–
CVSS
0.3%
EPSS
No
On KEV
Description
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libvirt · Redhat
through 0.9.11; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2693
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2693
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0748.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0127.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/06/11/2
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/06/11/3
Patch
https://www.redhat.com/archives/libvir-list/2012-April/msg01494.html
More from Libvirt
9.8
CVE-2016-5008
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and…
8.8
CVE-2020-14339
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process
8.8
CVE-2019-10132
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units
8.1
CVE-2017-1000256
libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates…
7.8
CVE-2019-10168
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the…