CVE-2010-0431

NameCVE-2010-0431
DescriptionQEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kvmsource(unstable)(not affected)
qemu-kvmsource(unstable)(not affected)

Notes

- qemu-kvm <not-affected> (QXL support not yet present in Debian packages)
- kvm <not-affected> (QXL support not yet present in Debian packages)

Search for package or bug name: Reporting problems