PT-2018-10010
CVE-2018-1062
·
تاريخ النشر
2018-03-06
·
تاريخ التحديث
2020-02-18
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
oVirt versions 4.1.x through 4.1.8
Description
A vulnerability was discovered where the combination of Enable Discard and Wipe After Delete flags for VM disks could cause a disk to be incompletely zeroed when removed from a VM. This could potentially reveal sensitive data to privileged users of another VM if the same storage blocks are later allocated to a new disk.
Recommendations
For oVirt versions 4.1.x through 4.1.8, update to version 4.1.9 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾