PT-2012-4186

CVE-2012-2693

·

Published

2012-06-17

·

Updated

2013-01-15

Description by

CVSS 2.0
3.7
Low
MetricsAV:L/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libvirt versions prior to 0.9.12
Description The issue arises from the improper assignment of USB devices to virtual machines when multiple devices share the same vendor and product ID. This could lead to the wrong device being associated with a guest, potentially allowing local users to access unintended USB devices.
Recommendations For versions prior to 0.9.12, update to version 0.9.12 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
CESA-2012_0748
RHSA-2012:0748
RHSA-2012_0748
RHSA-2013:0127
RHSA-2013_0127
Found an issue in the description? Have something to add? Feel free to write us 👾