CVE-2010-2223

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
redhatenterprise_virtualization_hypervisor
𝑥
≤ 5.4-2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://securitytracker.com/id?1024137
http://www.securityfocus.com/bid/41044
https://bugzilla.redhat.com/show_bug.cgi?id=604752
https://rhn.redhat.com/errata/RHSA-2010-0473.html
https://rhn.redhat.com/errata/RHSA-2010-0476.html
http://securitytracker.com/id?1024137
http://www.securityfocus.com/bid/41044
https://bugzilla.redhat.com/show_bug.cgi?id=604752
https://rhn.redhat.com/errata/RHSA-2010-0473.html
https://rhn.redhat.com/errata/RHSA-2010-0476.html