CVE-2010-0430
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.
- CVSS 2.0
- 7.4 HIGHAV:A/AC:M/Au:S/C:C/I:C/A:C
- EPSS
- 0.54% probability · 44th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- redhat/enterprise virtualization hypervisor
- Source
- secalert@redhat.com
References
- http://rhn.redhat.com/errata/RHSA-2010-0271.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=568702
- https://rhn.redhat.com/errata/RHSA-2010-0476.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2010-0271.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=568702
- https://rhn.redhat.com/errata/RHSA-2010-0476.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.