high8.6
CVE-2011-3147
Openstack nova qcow format could expose host filesystem information
Impact
Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | nova | < 12.0.0a0 | 12.0.0a0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Nova | from 2010.1 before 2012.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604
- https://github.com/advisories/GHSA-hqfx-4x4w-vmwp
- https://nvd.nist.gov/vuln/detail/CVE-2011-3147
- https://github.com/openstack/nova/commit/ff9d353b2f4fee469e530fbc8dc231a41f6fed84
- https://bugs.launchpad.net/nova/+bug/853330