CVE-2010-0298

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

Metrics

CVSS 2.0 6.5/10AV:N/AC:L/Au:S/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/38492Not Applicable
http://www.debian.org/security/2010/dsa-1996Not Applicable, Third Party Advisory
http://www.securityfocus.com/bid/38158Broken Link, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=559091Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11335Broken Link
https://rhn.redhat.com/errata/RHSA-2010-0088.htmlThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2010-0095.htmlThird Party Advisory
http://secunia.com/advisories/38492Not Applicable
http://www.debian.org/security/2010/dsa-1996Not Applicable, Third Party Advisory
http://www.securityfocus.com/bid/38158Broken Link, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=559091Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11335Broken Link
https://rhn.redhat.com/errata/RHSA-2010-0088.htmlThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2010-0095.htmlThird Party Advisory

Timeline

Published: Feb 12, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-02994.6openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspeci CVE-2010-03005.0cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a H CVE-2010-03016.9main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a u CVE-2010-03027.5Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the s CVE-2010-03035.0mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (da CVE-2010-03047.5Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause CVE-2010-03055.0ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka CVE-2010-03064.1The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) a CVE-2010-03074.7The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF inte CVE-2010-03084.0lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (asserti CVE-2010-03096.8The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state dat CVE-2010-03106.8Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from sof