CVE catalog

CVE-2010-2242

libvirt: CVE-2010-2242

Severity: Medium
Published: Jul 12, 2010, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.42% · Oct 27, 2026

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libvirt	sid	`12.8.0-1`	fixed
Debian	libvirt	forky	`12.8.0-1`	fixed
Debian	libvirt	trixie	`11.3.0-3+deb13u3`	fixed
Debian	libvirt	bookworm	`9.0.0-4+deb12u2`	fixed
Opensuse	libvirt	tumbleweed	`2.5.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libvirt	source	sid	`0.8.3-1`	low	Not reported	Not reported
Debian	libvirt	source	forky	`0.8.3-1`	low	Not reported	Not reported
Debian	libvirt	source	trixie	`0.8.3-1`	low	Not reported	Not reported
Debian	libvirt	source	bookworm	`0.8.3-1`	low	Not reported	Not reported
Opensuse	libvirt	rpm	tumbleweed	`2.5.0-1.1`	Not reported	OPENSUSE-SU-2024:10209-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libvirt-client]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-client-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-common]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-libxl]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-lxc]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nodedev]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-secret]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-core]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-disk]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi-direct]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-logical]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-mpath]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.5.0-1.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:04:58 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]