vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2010-3851

N/A
Published: November 4, 2010 at 05:00 PM UTC
Updated: June 16, 2026 at 11:23 PM UTC
1 product affected across 1 vendorLibguestfs· also runs on 2 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Libguestfs· Libguestfs
95%
v ≤ 1.5.221.5.01.5.11.5.101.5.111.5.121.5.131.5.141.5.151.5.161.5.171.5.181.5.191.5.21.5.201.5.211.5.31.5.41.5.51.5.61.5.71.5.81.5.9
matthew-booth-virt-v2v (environment) · richard-jones-virt-inspector (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (13)

Vendor Advisoryx_refsource_FEDORAPatch
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050237.html
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050742.html
x_refsource_CONFIRM
Source: [email protected]
http://rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions/
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/41797
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/42235
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2011-0586.html
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/44166
VDB Entryx_refsource_VUPENVendor Advisory
Source: [email protected]
http://www.vupen.com/english/advisories/2010/2874

CVSS

4.7MEDIUM[email protected]
Confidentiality
COMPLETE
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card