{"id":"CVE-2010-3851","aliases":["EUVD-2010-3830","GHSA-vc83-g5p3-ggc5","RHSA-2011:0586"],"status":"published","title":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...","description":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.","severity":{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0037,"percentile":0.31233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2010-11-04T17:00:00Z","modified":"2026-06-26T12:21:36Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-debuginfo","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-javadoc","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ruby-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"guestfish","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-mount","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools-c","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Sys-Guestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-debuginfo","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-javadoc","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ruby-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"guestfish","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-mount","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools-c","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Sys-Guestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-debuginfo","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-javadoc","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ruby-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"guestfish","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-mount","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools-c","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Sys-Guestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-debuginfo","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-javadoc","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs-devel","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ruby-libguestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"guestfish","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-mount","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools-c","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Sys-Guestfs","fixed_in":["1:1.7.17-17.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"guestfish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-mount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"guestfish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-mount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"guestfish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-mount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ocaml-libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"guestfish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-mount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.17-17.el6"}]}]}],"products":[{"vendor":"libguestfs","product":"libguestfs"}],"references":[{"url":"https://www.redhat.com/archives/libguestfs/2010-October/msg00041.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643958","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.redhat.com/archives/libguestfs/2010-October/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050237.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050742.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/2963","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0586.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/44166","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/41797","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/libguestfs/2010-October/msg00036.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/42235","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/2874","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3851","tags":["advisory"]},{"url":"http://rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions"},{"url":"https://github.com/advisories/GHSA-vc83-g5p3-ggc5"},{"url":"https://access.redhat.com/errata/RHSA-2011:0586","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html#libguestfs","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=600144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=612308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=615223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=627468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=627832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=627833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=633174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=639601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=639602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=657472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=657502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=666577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=666579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=668115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=668611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=676788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=691724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695138","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0586.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3851","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-3851","description":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.","status":"published","published":"2010-11-04T17:00:00Z","modified":"2024-08-07T03:26:11.393Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3830","description":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.","status":"published","published":"2010-11-04T17:00:00Z","modified":"2024-08-07T03:26:11Z","updated_at":"2026-11-03T01:39:32.539513Z"}],"ghsa":[{"id":"GHSA-vc83-g5p3-ggc5","title":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...","description":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.","status":"published","published":"2022-05-17T05:39:49Z","modified":"2025-04-11T03:41:53Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:06.818128Z"}],"nvd":[{"id":"CVE-2010-3851","description":"libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.","status":"published","published":"2010-11-04T18:00:02.767Z","modified":"2026-06-16T23:23:40.48Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:57.065463Z"}],"osv":[{"id":"RHSA-2011:0586","title":"Red Hat Security Advisory: libguestfs security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:55:17Z","modified":"2026-06-26T12:21:36.912862921Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}