CVE-2018-1062— Red Hat oVirt 安全漏洞

N/A

A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.

N/A

敏感数据的不恰当跨边界移除

Red Hat oVirt 安全漏洞

Red Hat oVirt是美国红帽（Red Hat）公司的一套开源的虚拟化管理平台，是RHEV（企业虚拟化平台）的开源版本，由ovirt-node客户端和overt-engine管理端组成。 Red Hat oVirt 4.1.9之前的4.1.x版本中存在安全漏洞，该漏洞源于当磁盘被移除时，程序没有清除数据。攻击者可利用该漏洞获取敏感数据。

N/A

N/A