Every CVE Search/ Get API key

CVE-2010-2239

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user...

4.4 MediumFix available

CVE-2010-2239 is a medium vulnerability (CVSS 4.4) in Libvirt, published August 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile. Fixed in libvirt 0.8.3-1.

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Exploit likelihood

0.33%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.4

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
CVE-2010-2239
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:S/C:C/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
CVE-2010-2239
Updated
2026-11-02
EUVDEUVD-2010-2251 No score

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
EUVD-2010-2251
Updated
2026-11-03
GitHub AdvisoriesGHSA-9w2j-rv9v-ph7h No score

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user...

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
GHSA-9w2j-rv9v-ph7h
Updated
2026-11-02
OSV No score

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
CVE-2010-2239
Updated
2026-11-02
OSVDEBIAN-CVE-2010-2239 No score

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Record
DEBIAN-CVE-2010-2239
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libvirt
Debian:12
 before 0.8.3-1
0.8.3-1
libvirt
Debian:13
 before 0.8.3-1
0.8.3-1
libvirt
Debian:14
 before 0.8.3-1
0.8.3-1
libvirt
Red Hat:rhel_virtualization:5::client
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-devel
Red Hat:rhel_virtualization:5::client
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-python
Red Hat:rhel_virtualization:5::client
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt
Red Hat:rhel_virtualization:5::server
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-devel
Red Hat:rhel_virtualization:5::server
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3
libvirt-python
Red Hat:rhel_virtualization:5::server
 before 0:0.6.3-33.el5_5.3
0:0.6.3-33.el5_5.3

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open