CVE-2010-0419 describes a vulnerability in the x86 emulator of KVM 83, specifically when a guest is configured for Symmetric Multiprocessing (SMP). This flaw allows guest OS users to potentially cause a denial of service (guest OS crash) or elevate privileges within the guest OS. The attack involves manipulating segment selectors through IO ports or MMIO regions, enabling the replacement of instructions between emulator entry and instruction fetch. With a CVSS score of 4.4, this vulnerability is of medium severity, requiring local access and moderate attack complexity. There is no evidence of active exploitation, and no public exploit code is available. Community discussion is minimal, with only one mention found.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
83CPE matchmatch criteria | cpe:2.3:a:kvm_qumranet:kvm:83:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.