Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2012-2693

Publication date 17 June 2012

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

Read the notes from the security team

Status

Package Ubuntu Release Status
libvirt 13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise Ignored
11.10 oneiric Ignored
11.04 natty Ignored
10.04 LTS lucid Ignored
8.04 LTS hardy Ignored

Notes

jdstrand

need 3rd patch to fix a regression

mdeslaur

need 4th patch to fix another regression possibly 5th patch for another regression we aren't going to backport this, as it is intrusive. marking as ignored.