CVE-2010-2223

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.

• CWE-264

• http://securitytracker.com/id?1024137
• http://www.securityfocus.com/bid/41044
• https://bugzilla.redhat.com/show_bug.cgi?id=604752
• https://rhn.redhat.com/errata/RHSA-2010-0473.htmlPatch, Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0476.htmlPatch, Vendor Advisory
• http://securitytracker.com/id?1024137
• http://www.securityfocus.com/bid/41044
• https://bugzilla.redhat.com/show_bug.cgi?id=604752
• https://rhn.redhat.com/errata/RHSA-2010-0473.htmlPatch, Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0476.htmlPatch, Vendor Advisory

Published

Jun 24, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2217Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x befor…
• CVE-2010-2218Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x befor…
• CVE-2010-2219Unspecified vulnerability in Adobe Flash Media Server (FMS) …
• CVE-2010-2220Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x befor…
• CVE-2010-2221Multiple buffer overflows in the iSNS implementation in isns…
• CVE-2010-2222The _ger_parse_control function in Red Hat Directory Server …7.5
• CVE-2010-2224The snapshot merging functionality in Red Hat Enterprise Vir…
• CVE-2010-2225Use-after-free vulnerability in the SplObjectStorage unseria…
• CVE-2010-2226The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux …
• CVE-2010-2227Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, an…
• CVE-2010-2228Cross-site scripting (XSS) vulnerability in the MNET access-…
• CVE-2010-2229Multiple cross-site scripting (XSS) vulnerabilities in blog/…