CVE-2011-2178

The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which…

published August 10, 2011

CVSS
—
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.6th percentile
Published
2011-08-10T20:00Z
EPSS history
Timeline
  • 10 AUG 20:00Z
    The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which…
    cvelistv5