Description
Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html ↗
- http://ubuntu.com/usn/usn-1008-2 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html ↗
- http://libvirt.org/news.html ↗
- http://ubuntu.com/usn/usn-1008-1 ↗
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html ↗
- http://ubuntu.com/usn/usn-1008-3 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=607810 ↗
- http://www.vupen.com/english/advisories/2010/2763 ↗