CVE-2010-0435

Severity

46%

Complexity

31%

Confidentiality

115%

Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference'

The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.

Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference'

CVSS 2.0 Base Score 4.6. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:S/C:N/I:N/A:C).

Overview

First reported 14 years ago

2010-08-24 18:00:00

Last updated 14 years ago

2011-01-19 06:54:00

Affected Software

Red Hat Enterprise Virtualization (RHEV) :2.2

2.2

redhat:kvm:83

83

References

SUSE-SA:2011:001

42778

ADV-2011-0012

https://bugzilla.redhat.com/show_bug.cgi?id=570528

RHSA-2010:0622

Patch, Vendor Advisory

RHSA-2010:0627

Patch, Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.