CVE-2012-2693
Priority
Low
Description
libvirt, possibly before 0.9.12, does not properly assign USB devices to
virtual machines when multiple devices have the same vendor and product ID,
which might cause the wrong device to be associated with a guest and might
allow local users to access unintended USB devices.
virtual machines when multiple devices have the same vendor and product ID,
which might cause the wrong device to be associated with a guest and might
allow local users to access unintended USB devices.
References
Bugs
Notes
jdstrand> need 3rd patch to fix a regression
mdeslaur> need 4th patch to fix another regression
mdeslaur> possibly 5th patch for another regression
mdeslaur> need 4th patch to fix another regression
mdeslaur> possibly 5th patch for another regression
Package
| Upstream: | released (0.9.12-1) |
| Ubuntu 8.04 LTS (Hardy Heron): | ignored (reached end-of-life) |
| Ubuntu 10.04 LTS (Lucid Lynx): | needed |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | needed |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (0.9.12-0ubuntu3) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (0.9.12-0ubuntu3) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (0.9.12-0ubuntu3) |
Patches: