UnratedFix available
libvirt — security advisory
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
- Products
- libvirt
- Affected versions
- Not specified
- Fixed versions
- 0.8.3-1
- CVEs
- CVE-2010-2242
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 23:29 UTC · Revision 1
Source evidence
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
osv:DEBIAN-CVE-2010-2242
libvirt
Fixed versions: 0.8.3-1
libvirt
Fixed versions: 0.8.3-1
libvirt
Fixed versions: 0.8.3-1
Complete source record
{
"id": "b82406a62c6783dd02b392a185f722a877e62cc4733838fbd39d82beb9de5609",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2010-2242",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2010-2242",
"summary": "Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.",
"evidence": "osv:DEBIAN-CVE-2010-2242",
"products": [
{
"name": {
"value": "libvirt",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.8.3-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvirt",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.8.3-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libvirt",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.8.3-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2010-2242",
"aliases": [
"DEBIAN-CVE-2010-2242"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.8.3-1"
}
]
}
],
"package": {
"name": "libvirt",
"purl": "pkg:deb/debian/libvirt?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-2242.json"
},
"ecosystem_specific": {
"urgency": "low"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.8.3-1"
}
]
}
],
"package": {
"name": "libvirt",
"purl": "pkg:deb/debian/libvirt?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-2242.json"
},
"ecosystem_specific": {
"urgency": "low"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.8.3-1"
}
]
}
],
"package": {
"name": "libvirt",
"purl": "pkg:deb/debian/libvirt?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-2242.json"
},
"ecosystem_specific": {
"urgency": "low"
}
}
],
"modified": "2026-10-23T17:47:45.149578758Z",
"provider": "osv",
"upstream": [
"CVE-2010-2242"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2010-2242"
]
},
"related_cves": [
{
"value": "CVE-2010-2242",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 418708,
"published_at": "2010-08-19T18:00:03.67+00:00"
}