CVE-2010-2224 The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows...
LowCVSS 2.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization manager | <= 2.1 | No fix listed |
References
- 41045 vdb-entry
- bugzilla.redhat.com
- RHSA-2010:0478 patch vendor-advisory