CVE-2010-3851
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
Exploit likelihood
What each source reports
NVD Score used
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
- Record
CVE-2010-3851- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
- Record
CVE-2010-3851- Updated
- 2026-11-02
EUVDEUVD-2010-3830 No score
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
- Record
EUVD-2010-3830- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vc83-g5p3-ggc5 No score
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
- Record
GHSA-vc83-g5p3-ggc5- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libguestfsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-develRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-java-develRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javadocRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfs-develRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
python-libguestfsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ruby-libguestfsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
guestfishRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libguestfs-javaRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-mountRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-toolsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-tools-cRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
perl-Sys-GuestfsRed Hat:enterprise_linux:6::client |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-develRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-java-develRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfs-develRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
python-libguestfsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ruby-libguestfsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
guestfishRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javaRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-mountRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-toolsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-tools-cRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
perl-Sys-GuestfsRed Hat:enterprise_linux:6::computenode |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-develRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-java-develRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javadocRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfs-develRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
python-libguestfsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ruby-libguestfsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
guestfishRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javaRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-mountRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-toolsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-tools-cRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
perl-Sys-GuestfsRed Hat:enterprise_linux:6::server |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-develRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-java-develRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ocaml-libguestfs-develRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
python-libguestfsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
ruby-libguestfsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
guestfishRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-javaRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-mountRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-toolsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
libguestfs-tools-cRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
perl-Sys-GuestfsRed Hat:enterprise_linux:6::workstation |
before 1:1.7.17-17.el6 | 1:1.7.17-17.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3851 is a medium vulnerability (CVSS 4.7) in Libguestfs, published November 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in libguestfs 1:1.7.17-17.el6.
References
redhat.com/archives/libguestfs/2010-October/msg00041.html
bugzilla.redhat.com/show_bug.cgi?id=643958
rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions
lists.fedoraproject.org/pipermail/package-announce/2010-November/050237.html
Show 38 moreShow less
vupen.com/english/advisories/2010/2963
securityfocus.com/bid/44166
secunia.com/advisories/41797
nvd.nist.gov/vuln/detail/CVE-2010-3851
github.com/advisories/GHSA-vc83-g5p3-ggc5
access.redhat.com/errata/RHSA-2011:0586
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0586.json
cve.org/CVERecord?id=CVE-2010-3851