{ "schema_version": "1.4.0", "id": "GHSA-mf73-m82g-g4hv", "modified": "2022-05-02T06:12:39Z", "published": "2022-05-02T06:12:39Z", "aliases": [ "CVE-2010-0429" ], "details": "libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0429" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=568701" }, { "type": "WEB", "url": "https://rhn.redhat.com/errata/RHSA-2010-0622.html" }, { "type": "WEB", "url": "https://rhn.redhat.com/errata/RHSA-2010-0633.html" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-08-24T18:00:00Z" } }