{"id":"CVE-2012-2693","aliases":["DEBIAN-CVE-2012-2693","EUVD-2012-2675","GHSA-p575-v2mx-34m6","RHSA-2012:0748","RHSA-2013:0127"],"status":"published","title":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","severity":{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00331,"percentile":0.2638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2012-06-17T01:00:00Z","modified":"2026-10-23T17:47:21Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["0.9.12-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["0.9.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["0.9.12-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-debuginfo","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-devel","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-client","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-python","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-debuginfo","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-devel","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-client","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-python","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-debuginfo","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-client","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-devel","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-python","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-debuginfo","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-client","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-devel","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-python","fixed_in":["0:0.9.10-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-debuginfo","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-devel","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-python","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-debuginfo","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-devel","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-python","fixed_in":["0:0.8.2-29.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.2-29.el5"}]}]}],"products":[{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/06/11/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0127.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://www.redhat.com/archives/libvir-list/2012-April/msg01494.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0748.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/06/11/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2693","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p575-v2mx-34m6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-2693","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0748","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=700272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=700523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=702260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=708735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=715019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811227","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/libvirt.html#RHSA-2012-0748","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=589849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=605953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=611823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=611824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=619846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=624447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=625115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=625362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=628823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=638633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=639599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=685083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=693758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=697808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=715590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=735950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=741510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=752255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=753169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=754128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=758231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=758590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=765698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=766308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=766553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=787761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=788338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=789220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=795093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=795127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=795656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=795978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=796526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=797066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=803591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=816465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=816662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=820461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=820869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=698521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831164","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0748.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2693","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0127","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=675319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783001","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0127.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-2693","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2012-06-17T01:00:00Z","modified":"2024-08-06T19:42:31.709Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2675","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2012-06-17T01:00:00Z","modified":"2024-08-06T19:42:31Z","updated_at":"2026-11-03T01:56:13.895728Z"}],"ghsa":[{"id":"GHSA-p575-v2mx-34m6","title":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2022-05-17T05:16:58Z","modified":"2023-01-28T05:03:50Z","updated_at":"2026-11-02T14:44:03.582616Z"}],"nvd":[{"id":"CVE-2012-2693","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2012-06-17T03:41:42.203Z","modified":"2026-06-16T23:41:53.807Z","cvss":[{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:14.336529Z"}],"osv":[{"id":"CVE-2012-2693","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2012-06-17T03:41:42Z","modified":"2026-04-10T03:42:20.471054Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-2693","description":"libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.","status":"published","published":"2012-06-17T03:41:42.203Z","modified":"2026-10-23T17:47:21.458577759Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"RHSA-2012:0748","title":"Red Hat Security Advisory: libvirt security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:36:10Z","modified":"2026-06-26T12:21:42.552828569Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:0127","title":"Red Hat Security Advisory: libvirt security and bug fix update","status":"published","published":"2024-09-15T19:36:15Z","modified":"2026-06-26T10:20:26Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}