NetSight
medium6.5

CVE-2015-5247

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (li…

Impact

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

Affected products

VendorProductAffected versions
RedhatLibvirt
Versions 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10

Weakness classification

References