CVE-2012-2693
- State
- Published
- Severity
- Not scored
- Published
- Jun 17, 2012
- Updated
- Aug 6, 2024
- Reserved
- May 14, 2012
Description
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20120611 Re: CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignoredmailing-list
- RHSA-2013:0127vendor-advisory
- [libvirt] 20120428 [PATCH 0/3] usb devices with same vendor, productID hotplug supportmailing-list
- RHSA-2012:0748vendor-advisory
- [oss-security] 20120611 CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignoredmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.