Executive Summary

Informations
Name CVE-2011-2178 First vendor Publication 2011-08-10
Vendor Cve Last vendor Modification 2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:S/C:C/I:N/A:N)
Cvss Base Score 4.4 Attack Range Local
Cvss Impact Score 6.9 Attack Complexity Medium
Cvss Expoit Score 2.7 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2178

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13975
 
Oval ID: oval:org.mitre.oval:def:13975
Title: USN-1152-1 -- libvirt vulnerabilities
Description: libvirt: Libvirt virtualization toolkit Libvirt could be made to crash or read arbitrary files on the host.
Family: unix Class: patch
Reference(s): USN-1152-1
CVE-2011-1486
CVE-2010-2238
CVE-2011-2178
 Version: 5
Platform(s): Ubuntu 11.04
Ubuntu 10.04
Ubuntu 10.10
 Product(s): libvirt
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 3

OpenVAS Exploits

Date Description
2012-03-12 Name : Gentoo Security Advisory GLSA 201202-07 (libvirt)
File : nvt/glsa_201202_07.nasl
2011-07-18 Name : Fedora Update for libvirt FEDORA-2011-9091
File : nvt/gb_fedora_2011_9091_libvirt_fc15.nasl
2011-06-20 Name : Ubuntu Update for libvirt USN-1152-1
File : nvt/gb_ubuntu_USN_1152_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
74559 libvirt security/security_manager.c virSecurityManagerGetPrivateData Function...

Nessus® Vulnerability Scanner

Date Description
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_4_libvirt-110614.nasl - Type : ACT_GATHER_INFO
2012-02-28 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201202-07.nasl - Type : ACT_GATHER_INFO
2011-07-12 Name : The remote Fedora host is missing a security update.
File : fedora_2011-9091.nasl - Type : ACT_GATHER_INFO
2011-06-17 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-1152-1.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
CONFIRM http://libvirt.org/news.html
http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2178.html
https://bugzilla.redhat.com/show_bug.cgi?id=709769
https://bugzilla.redhat.com/show_bug.cgi?id=709775
FEDORA http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html
MLIST https://www.redhat.com/archives/libvir-list/2011-May/msg01935.html
SUSE http://lists.opensuse.org/opensuse-updates/2011-06/msg00030.html
UBUNTU http://www.ubuntu.com/usn/USN-1152-1

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2023-11-07 21:47:19
  • Multiple Updates
2023-02-13 09:28:55
  • Multiple Updates
2021-05-04 12:14:34
  • Multiple Updates
2021-04-22 01:15:51
  • Multiple Updates
2020-05-23 00:28:39
  • Multiple Updates
2016-04-26 20:48:07
  • Multiple Updates
2014-06-14 13:30:49
  • Multiple Updates
2014-02-17 11:02:48
  • Multiple Updates
2013-05-10 23:01:28
  • Multiple Updates