CVE-2010-2242
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged...
CVE-2010-2242 is a low vulnerability (CVSS 2.1) in Libvirt, published August 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in libvirt 0.8.3-1.
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
Exploit likelihood
What each source reports
NVD Score used
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
CVE-2010-2242- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
CVE-2010-2242- Updated
- 2026-11-02
EUVDEUVD-2010-2254 No score
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
EUVD-2010-2254- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j4r2-c3hx-6f4x No score
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged...
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
GHSA-j4r2-c3hx-6f4x- Updated
- 2026-11-02
OSV No score
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
CVE-2010-2242- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2242 No score
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Record
DEBIAN-CVE-2010-2242- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10209-1 No score
libvirt-2.5.0-1.1 on GA media
These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10209-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtDebian:12 |
before 0.8.3-1 | 0.8.3-1 |
libvirtDebian:13 |
before 0.8.3-1 | 0.8.3-1 |
libvirtDebian:14 |
before 0.8.3-1 | 0.8.3-1 |
libvirtRed Hat:rhel_virtualization:5::client |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-debuginfoRed Hat:rhel_virtualization:5::client |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-develRed Hat:rhel_virtualization:5::client |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-pythonRed Hat:rhel_virtualization:5::client |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirtRed Hat:rhel_virtualization:5::server |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-develRed Hat:rhel_virtualization:5::server |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirt-pythonRed Hat:rhel_virtualization:5::server |
before 0:0.6.3-33.el5_5.3 | 0:0.6.3-33.el5_5.3 |
libvirtopenSUSE:Tumbleweed |
before 2.5.0-1.1 | 2.5.0-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
vupen.com/english/advisories/2010/2062
libvirt.org/news.html
lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html
ubuntu.com/usn/usn-1008-2
redhat.com/support/errata/RHSA-2010-0615.html
Show 53 moreShow less
bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943
bugzilla.redhat.com/show_bug.cgi?id=602455
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2010-2242
github.com/advisories/GHSA-j4r2-c3hx-6f4x
security-tracker.debian.org/tracker/CVE-2010-2242
access.redhat.com/errata/RHSA-2010:0615
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0615.json
cve.org/CVERecord?id=CVE-2010-2239
suse.com/security/cve/CVE-2010-2242