CVE-2010-0430

Severity: high (CVSS 7.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-27 · updated 2026-06-16
Weakness: CWE-119

Description

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.

Affected products

RedHat Enterprise Virtualization Hypervisor: through 5.4-2.1

References

http://rhn.redhat.com/errata/RHSA-2010-0271.html
https://bugzilla.redhat.com/show_bug.cgi?id=568702
https://rhn.redhat.com/errata/RHSA-2010-0476.html
http://rhn.redhat.com/errata/RHSA-2010-0271.html
https://bugzilla.redhat.com/show_bug.cgi?id=568702
https://rhn.redhat.com/errata/RHSA-2010-0476.html

Get alerted when CVE-2010-0430 or the next vulnerability affects your stack