CVE-2012-2693

At a glance

Severity
Not available
EPSS
EPSS 0.33 % · percentile 26 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Modified

Description

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

Scores

VersionScoreVectorScored by
CVSS 2.0LOW 3.7AV:L/AC:H/Au:N/C:P/I:P/A:PNVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
affected n/a

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD