CVE-2012-2693
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...
3.7 LowFix available
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
Exploit likelihood
0.33%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
CVE-2012-2693- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
CVE-2012-2693- Updated
- 2026-11-02
EUVDEUVD-2012-2675 No score
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
EUVD-2012-2675- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p575-v2mx-34m6 No score
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
GHSA-p575-v2mx-34m6- Updated
- 2026-11-02
OSV No score
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
CVE-2012-2693- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2693 No score
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
- Record
DEBIAN-CVE-2012-2693- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtDebian:12 |
before 0.9.12-1 | 0.9.12-1 |
libvirtDebian:13 |
before 0.9.12-1 | 0.9.12-1 |
libvirtDebian:14 |
before 0.9.12-1 | 0.9.12-1 |
libvirtRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-develRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-lock-sanlockRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-clientRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-pythonRed Hat:enterprise_linux:6::client |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirtRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libvirt-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-develRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-lock-sanlockRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-clientRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-pythonRed Hat:enterprise_linux:6::computenode |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-lock-sanlockRed Hat:storage:3:server:el6 |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirtRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-lock-sanlockRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-clientRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-develRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-pythonRed Hat:enterprise_linux:6::server |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirtRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-lock-sanlockRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-clientRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-develRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirt-pythonRed Hat:enterprise_linux:6::workstation |
before 0:0.9.10-21.el6 | 0:0.9.10-21.el6 |
libvirtRed Hat:rhel_virtualization:5::client |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-debuginfoRed Hat:rhel_virtualization:5::client |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-develRed Hat:rhel_virtualization:5::client |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-pythonRed Hat:rhel_virtualization:5::client |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirtRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-develRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
libvirt-pythonRed Hat:rhel_virtualization:5::server |
before 0:0.8.2-29.el5 | 0:0.8.2-29.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2693 is a low vulnerability (CVSS 3.7) in Redhat Libvirt, published June 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in libvirt 0.9.12-1.
References
openwall.com/lists/oss-security/2012/06/11/3
rhn.redhat.com/errata/RHSA-2013-0127.html
redhat.com/archives/libvir-list/2012-April/msg01494.html
nvd.nist.gov/vuln/detail/CVE-2012-2693
Show 188 moreShow less
github.com/advisories/GHSA-p575-v2mx-34m6
security-tracker.debian.org/tracker/CVE-2012-2693
access.redhat.com/errata/RHSA-2012:0748
bugzilla.redhat.com/show_bug.cgi?id=700272
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/libvirt.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0748.json
cve.org/CVERecord?id=CVE-2012-2693