Rapid7 Vulnerability & Exploit Database

ELSA-2012-0748 Low: Oracle Linux libvirt security, bug fix, and enhancement update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2012-0748 Low: Oracle Linux libvirt security, bug fix, and enhancement update

Severity

CVSS

(AV:L/AC:H/Au:N/C:P/I:P/A:P)

Published

07/02/2012

Created

07/25/2018

Added

07/17/2012

Modified

07/04/2017

Description

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

Solution(s)

oracle-linux-upgrade-libvirt
oracle-linux-upgrade-libvirt-client
oracle-linux-upgrade-libvirt-devel
oracle-linux-upgrade-libvirt-lock-sanlock
oracle-linux-upgrade-libvirt-python

References

https://attackerkb.com/topics/cve-2012-2693
CVE - 2012-2693
RHSA-2012:0748
RHSA-2013:0127
http://oss.oracle.com/pipermail/el-errata/2012-July/002899.html

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;