Read the docs
TI-2010-02151 Aliases CVE-2010-2242GHSA-j4r2-c3hx-6f4x

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of…

Priority LOW 12CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · None · None
Fix status
Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.

Why it matters now

EPSS 0.00423 36th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 2 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:libvirt:libvirt:0.2.0:*:*:*:*:*:*:*0.2.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.2.1:*:*:*:*:*:*:*0.2.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.2.2:*:*:*:*:*:*:*0.2.2Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.2.3:*:*:*:*:*:*:*0.2.3Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.3.0:*:*:*:*:*:*:*0.3.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.3.1:*:*:*:*:*:*:*0.3.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.3.2:*:*:*:*:*:*:*0.3.2Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.3.3:*:*:*:*:*:*:*0.3.3Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.4.0:*:*:*:*:*:*:*0.4.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.4.1:*:*:*:*:*:*:*0.4.1Vulnerablelibvirt
  • cpe:2.3:a:libvirt:libvirt:0.2.0:*:*:*:*:*:*:* Versions 0.2.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.2.2:*:*:*:*:*:*:* Versions 0.2.2 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·libvirt
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:libvirt:libvirt:0.4.2:*:*:*:*:*:*:*0.4.2Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.4.3:*:*:*:*:*:*:*0.4.3Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.4.4:*:*:*:*:*:*:*0.4.4Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.4.6:*:*:*:*:*:*:*0.4.6Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.5.0:*:*:*:*:*:*:*0.5.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:*0.5.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.0:*:*:*:*:*:*:*0.6.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.1:*:*:*:*:*:*:*0.6.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.2:*:*:*:*:*:*:*0.6.2Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.3:*:*:*:*:*:*:*0.6.3Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.4:*:*:*:*:*:*:*0.6.4Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.6.5:*:*:*:*:*:*:*0.6.5Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.0:*:*:*:*:*:*:*0.7.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.1:*:*:*:*:*:*:*0.7.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.2:*:*:*:*:*:*:*0.7.2Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.3:*:*:*:*:*:*:*0.7.3Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.4:*:*:*:*:*:*:*0.7.4Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.5:*:*:*:*:*:*:*0.7.5Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.6:*:*:*:*:*:*:*0.7.6Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.7.7:*:*:*:*:*:*:*0.7.7Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.8.0:*:*:*:*:*:*:*0.8.0Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.8.1:*:*:*:*:*:*:*0.8.1Vulnerablelibvirt
cpe:2.3:a:libvirt:libvirt:0.8.2:*:*:*:*:*:*:*0.8.2Vulnerablelibvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.4.6:*:*:*:*:*:*:* Versions 0.4.6 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.2:*:*:*:*:*:*:* Versions 0.6.2 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.3:*:*:*:*:*:*:* Versions 0.6.3 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.4:*:*:*:*:*:*:* Versions 0.6.4 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.6.5:*:*:*:*:*:*:* Versions 0.6.5 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.4:*:*:*:*:*:*:* Versions 0.7.4 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.5:*:*:*:*:*:*:* Versions 0.7.5 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.6:*:*:*:*:*:*:* Versions 0.7.6 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.7.7:*:*:*:*:*:*:* Versions 0.7.7 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·libvirt
  • cpe:2.3:a:libvirt:libvirt:0.8.2:*:*:*:*:*:*:* Versions 0.8.2 Vulnerable ·libvirt

Remediation

Red Hat 1 advisory

  • RHSA-2010:0615 Released 2010-08-10 · Red Hat rating Low
    libvirt security and bug fix update
    • Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) libvirt-0.6.3-33.el5_5.3, libvirt-0.6.3-33.el5_5.3.i386, libvirt-devel-0.6.3-33.el5_5.3 +3
    • Red Hat Enterprise Linux Virtualization (v. 5 server) libvirt-0.6.3-33.el5_5.3, libvirt-0.6.3-33.el5_5.3.i386, libvirt-0.6.3-33.el5_5.3.ia64 +6

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix yet
Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)Fixed RHSA-2010:0615
Red Hat Enterprise Linux Virtualization (v. 5 server)Fixed RHSA-2010:0615
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-2242
  2. 2026-10-03 Alias added: GHSA-j4r2-c3hx-6f4x

References

Advisory 9

Other 3

  • TI-2008-04837 Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is… CVSS 2.0HIGH 7.2
  • TI-2014-02954 The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when… CVSS 2.0MEDIUM 5.8
  • TI-2014-02977 The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not… CVSS 2.0MEDIUM 5.0
  • TI-2015-04328 libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS… CVSS 3.0MEDIUM 5.5
  • TI-2009-00036 Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in… CVSS 2.0MEDIUM 4.4
  • TI-2010-02148 Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the… CVSS 2.0MEDIUM 4.4
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences