Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2010-2239

Published: 19 August 2010

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Notes

AuthorNote
jdstrand
AppArmor in Ubuntu 9.10 and 10.04 should protect the host OS, but
an attacker in a virtual machine may be able to access files of another
machine.
Ubuntu 9.10's qemu-img and kvm-img both support '-F backingType', so
hard code libvirt to use this
Ubuntu 9.04's qemu-img and kvm-img do not support specifiying a
backing store disk format, so we must autoprobe backing stores at this time.
Qemu didn't gain this option until 0.11, and 9.04 has 0.10 and kvm 84. The
changes to qemu/kvm are too invasive and regression-prone and therefore
an update will not be provided for this CVE for Ubuntu 9.04.

Priority

Medium

Status

Package Release Status
libvirt
Launchpad, Ubuntu, Debian
dapper Does not exist

hardy Not vulnerable

jaunty Ignored
(end of life)
karmic
Released (0.7.0-1ubuntu13.2)
lucid
Released (0.7.5-5ubuntu27.5)
maverick
Released (0.8.3-1ubuntu8)
upstream
Released (0.8.3-1)
This vulnerability is mitigated in part by an AppArmor profile.