Unrated severityNVD Advisory· Published Aug 24, 2010· Updated Apr 29, 2026
CVE-2010-0428
CVE-2010-0428
Description
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
Affected products
2- cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- rhn.redhat.com/errata/RHSA-2010-0622.htmlnvdPatchVendor Advisory
- rhn.redhat.com/errata/RHSA-2010-0633.htmlnvdPatchVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdVendor Advisory
News mentions
0No linked articles in our index yet.