Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2222 State: PUBLISHED Published: 2019-11-05T19:27:47 Last Updated: 2024-08-07T02:25:07.182Z Vendors: Red Hat Products: Red Hat Directory Server Problem Types: Other Description: The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2222 - https://access.redhat.com/security/cve/cve-2010-2222
CVE ID: CVE-2010-2223 State: PUBLISHED Published: 2010-06-24T17:00:00Z Last Updated: 2024-08-07T02:25:07.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0476.html - https://bugzilla.redhat.com/show_bug.cgi?id=604752 - http://
nces: - https://rhn.redhat.com/errata/RHSA-2010-0476.html - https://bugzilla.redhat.com/show_bug.cgi?id=604752 - http://www.securityfocus.com/bid/41044 - https://rhn.redhat.com/errata/RHSA-2010-0473.html - http://securitytracker.com/id?1024137
CVE ID: CVE-2010-2224 State: PUBLISHED Published: 2010-06-24T17:00:00Z Last Updated: 2024-08-07T02:25:07.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0478.html - http://www.securityfocus.com/bid/41045 - https://bugzilla.redhat.com/show_bug.cgi?id=606774
CVE ID: CVE-2010-2225 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T02:25:07.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40860 - http://twitter.com/i0n1c/statuses/16373156076 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59610 - http://www.debian.org
fo/?l=bugtraq&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59610 - http://www.debian.org/security/2010/dsa-2089 - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://www.securityfocus.com/bid/40948 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=605641 - http://support.apple.com/kb/HT4312 - http://twitter.com/i0n1c/statuses/16447867829 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://pastebin.com/mXGidCsd
CVE ID: CVE-2010-2226 State: PUBLISHED Published: 2010-09-03T19:00:00 Last Updated: 2024-08-07T02:25:07.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=
.net.ph/message/20100616.135735.40f53a32.en.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63 - http://www.ubuntu.com/usn/USN-1000-1 - http://marc.info/?l=oss-security&m=127687486331790&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://bugzilla.redhat.com/show_bug.cgi?id=605158 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://marc.info/?l=oss-security&m=1276771
e/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://marc.info/?l=oss-security&m=127677135609357&w=2 - http://secunia.com/advisories/43315 - http://archives.free.net.ph/message/20100616.130710.301704aa.en.html - http://www.debian.org/security/2010/dsa-2094 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.securityfocus.com/bid/40920 - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-2227 State: PUBLISHED Published: 2010-07-13T17:00:00 Last Updated: 2024-08-07T02:25:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7007274 - http://www.securityfocus.com/archive/1/512272/100/0/threaded - http://secunia.com/advis
wContent.do?externalId=7007274 - http://www.securityfocus.com/archive/1/512272/100/0/threaded - http://secunia.com/advisories/42079 - http://www.debian.org/security/2011/dsa-2207 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.novell.com/support/viewContent.do?externalId=7007275 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:177 - http://www.vupen.com/english/advisories/2010/3056 - http://secunia.com/advisories/43310 - http://www.redhat.com/support/errata/RHSA-2010-0581.html - http://www.securityfocus.com/bid/41544 - http://tomcat.apache.org/security-7.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html - http://www.vupen
security-7.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html - http://www.vupen.com/english/advisories/2010/1986 - http://svn.apache.org/viewvc?view=revision&revision=959428 - http://secunia.com/advisories/44183 - http://www.redhat.com/support/errata/RHSA-2010-0580.html - http://secunia.com/advisories/41025 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050207.html - http://geronimo.apache.org/22x-security-report.html - http://secunia.com/advisories/40813 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://secunia.com/advisorie
2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://secunia.com/advisories/42368 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532 - http://securitytracker.com/id?1024180 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://svn.apache.org/viewvc?view=revision&revision=958911 - http://tomcat.apache.org/security-5.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=bugtraq&m=1290703
/security-5.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60264 - http://support.apple.com/kb/HT5002 - http://www.redhat.com/support/errata/RHSA-2010-0582.html - http://www.vupen.com/english/advisories/2010/2868 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://geronimo.apache.org/21x-security-report.html - http://secunia.com/advisories/42454 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://svn.apache.org/viewvc?view=revision&re
=129070310906557&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://svn.apache.org/viewvc?view=revision&revision=958977 - http://www.redhat.com/support/errata/RHSA-2010-0583.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2010-2228 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:25:07.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.8.13_release_notes - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - http://www.openwall.com/lists/os
ge-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - http://www.openwall.com/lists/oss-security/2010/06/21/2 - http://secunia.com/advisories/40352 - http://www.vupen.com/english/advisories/2010/1530 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html - http://docs.moodle.org/en/Moodle_1.9.9_release_notes - http://secunia.com/advisories/40248 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html - http://moodle.org/mod/forum/discuss.php?d=152366 - http://tracker.moodle.org/browse/MDL-22040 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.redhat.com/show_b
-22040 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=605809
CVE ID: CVE-2010-2229 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:25:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.moodle.org/moodle/blog/lib.php?r1=1.62.2.9&r2=1.62.2.10 - http://docs.moodle.org/en/Moodle_1.8.13_release_notes - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - h
doraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - http://www.openwall.com/lists/oss-security/2010/06/21/2 - http://secunia.com/advisories/40352 - http://www.vupen.com/english/advisories/2010/1530 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html - http://moodle.org/mod/forum/discuss.php?d=152367 - http://docs.moodle.org/en/Moodle_1.9.9_release_notes - http://secunia.com/advisories/40248 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://tracker.moodle.org/browse/MDL-22631 - htt
//lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://tracker.moodle.org/browse/MDL-22631 - https://bugzilla.redhat.com/show_bug.cgi?id=605809 - http://cvs.moodle.org/moodle/blog/lib.php?r1=1.80.2.20&r2=1.80.2.21
CVE ID: CVE-2010-2230 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:25:07.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.moodle.org/browse/MDL-22042 - http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171&r2=1.970.2.172 - http://docs.moodle.org/en/Moodle_1.8.13_release_notes - http://lists.fedoraproject.org/pipermail/package-anno
70.2.172 - http://docs.moodle.org/en/Moodle_1.8.13_release_notes - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - http://www.openwall.com/lists/oss-security/2010/06/21/2 - http://secunia.com/advisories/40352 - http://www.vupen.com/english/advisories/2010/1530 - http://moodle.org/mod/forum/discuss.php?d=152368 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html - http://docs.moodle.org/en/Moodle_1.9.9_release_notes - http://secunia.com/advisories/40248 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html - http://cvs.moodle.org/moodle/lib/weblib.php
//lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html - http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114&r2=1.812.2.115 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=605809
CVE ID: CVE-2010-2231 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:25:07.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.8.13_release_notes - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/
lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html - http://www.vupen.com/english/advisories/2010/1571 - http://www.openwall.com/lists/oss-security/2010/06/21/2 - http://secunia.com/advisories/40352 - http://www.vupen.com/english/advisories/2010/1530 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html - http://moodle.org/mod/forum/discuss.php?d=152369 - http://docs.moodle.org/en/Moodle_1.9.9_release_notes - http://secunia.com/advisories/40248 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html - http://tracker.moodle.org/browse/MDL-21688 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.ht
- http://tracker.moodle.org/browse/MDL-21688 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://cvs.moodle.org/moodle/mod/quiz/report/overview/report.php?r1=1.98.2.50&r2=1.98.2.51 - https://bugzilla.redhat.com/show_bug.cgi?id=605809
CVE ID: CVE-2010-2232 State: PUBLISHED Published: 2017-10-23T13:00:00 Last Updated: 2024-08-07T02:25:07.510Z Vendors: Apache Software Foundation Products: Apache Derby Problem Types: n/a Description: In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/DERBY-2925 - http://www.securityfocus.com/bid/101562 - http://db.apache.org/derby/releases/release-10.6.2.1.html#Note+for+DERBY-2925
CVE ID: CVE-2010-2233 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T02:25:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://securitytracker.com/id?1024150 - https://bugzilla.redhat.com/show_bug.cgi?id=607198 - http://sec
1610612908&w=2 - http://securitytracker.com/id?1024150 - https://bugzilla.redhat.com/show_bug.cgi?id=607198 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://secunia.com/advisories/40422 - http://bugzilla.maptools.org/show_bug.cgi?id=2207 - http://www.remotesensing.org/libtiff/v3.9.4.html - http://secunia.com/advisories/50726 - https://bugzilla.redhat.com/show_bug.cgi?id=583081
CVE ID: CVE-2010-2234 State: PUBLISHED Published: 2010-08-19T20:00:00 Last Updated: 2024-08-07T02:25:07.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2010/Aug/199 - http://www.securityfocus.com/archive/1/513174/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=624764 - http://www.securityfocus.com/bid/42501
CVE ID: CVE-2010-2235 State: PUBLISHED Published: 2010-12-09T19:00:00Z Last Updated: 2024-08-07T02:25:07.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=607662 - http://www.redhat.com/support/errat
rogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=607662 - http://www.redhat.com/support/errata/RHSA-2010-0775.html - http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
CVE ID: CVE-2010-2236 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-07T02:25:07.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56952 - https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff - https://git.fedorahosted.org/cgit/spacewalk.
/56952 - https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff - https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f - https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9 - https://bugzilla.redhat.com/show_bug.cgi?id=607712 - https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html
CVE ID: CVE-2010-2237 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:25:07.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
ml - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html - http://libvirt.org/news.html - http://ubuntu.com/usn/usn-1008-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://ubuntu.com/usn/usn-1008-3 - https://bugzilla.redhat.com/show_bug.cgi?id=607810 - http://www.vupen.com/english/advisories/2010/2763
CVE ID: CVE-2010-2238 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:25:07.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July
uly/044520.html - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html - https://bugzilla.redhat.com/show_bug.cgi?id=607811 - http://libvirt.org/news.html - http://ubuntu.com/usn/usn-1008-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://ubuntu.com/usn/usn-1008-3 - http://www.vupen.com/english/advisories/2010/2763
CVE ID: CVE-2010-2239 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:25:07.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2062 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html - htt
http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html - https://bugzilla.redhat.com/show_bug.cgi?id=607812 - http://www.redhat.com/support/errata/RHSA-2010-0615.html - http://libvirt.org/news.html - http://ubuntu.com/usn/usn-1008-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://ubuntu.com/usn/usn-1008-3 - http://www.vupen.com/english/advisories/2010/2763