CVE-2010-2238

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Date published : 2010-08-19

https://bugzilla.redhat.com/show_bug.cgi?id=607811

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html