Unrated severityNVD Advisory· Published Nov 4, 2010· Updated Apr 29, 2026
CVE-2010-3851
CVE-2010-3851
Description
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.
Affected products
23cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:*range: <=1.5.22
- cpe:2.3:a:libguestfs:libguestfs:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.13:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.14:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.15:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.16:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.17:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.18:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.19:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.20:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.21:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:libguestfs:libguestfs:1.5.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- lists.fedoraproject.org/pipermail/package-announce/2010-November/050237.htmlnvdPatch
- www.redhat.com/archives/libguestfs/2010-October/msg00041.htmlnvdPatch
- secunia.com/advisories/41797nvdVendor Advisory
- www.vupen.com/english/advisories/2010/2874nvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050742.htmlnvd
- rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions/nvd
- secunia.com/advisories/42235nvd
- www.redhat.com/support/errata/RHSA-2011-0586.htmlnvd
- www.securityfocus.com/bid/44166nvd
- www.vupen.com/english/advisories/2010/2963nvd
- bugzilla.redhat.com/show_bug.cginvd
- www.redhat.com/archives/libguestfs/2010-October/msg00036.htmlnvd
- www.redhat.com/archives/libguestfs/2010-October/msg00037.htmlnvd
News mentions
0No linked articles in our index yet.