CVE-2010-2242
Fixed in a distro release EPSS <1%
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
Products: libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.8.3-1 |
| Debian 13 | libvirt | 0.8.3-1 |
| Debian 14 | libvirt | 0.8.3-1 |
| Red Hat rhel virtualization 5 | libvirt | 0:0.6.3-33.el5_5.3 |
| Red Hat rhel virtualization 5 | libvirt-debuginfo | 0:0.6.3-33.el5_5.3 |
| Red Hat rhel virtualization 5 | libvirt-devel | 0:0.6.3-33.el5_5.3 |
| Red Hat rhel virtualization 5 | libvirt-python | 0:0.6.3-33.el5_5.3 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |