Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2010-3851

libguestfs: missing disk format specifier when adding a disk

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Libguestfs Matthew Booth Redhat and 1 more
Products
Libguestfs Virt-v2v Enterprise Linux and 1 more
CVE-2011-1773

virt-v2v: vnc password protection is missing after vm conversion

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Matthew Booth Redhat
Products
Virt-v2v Enterprise Linux