low3.5
CVE-2015-7548
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, a…
Impact
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Nova | from 12.0.0 before 12.0.1 from 2015.1.0 before 2015.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-0018.html
- http://www.securityfocus.com/bid/80176
- https://security.openstack.org/ossa/OSSA-2016-001.html
- http://rhn.redhat.com/errata/RHSA-2016-0018.html
- http://www.securityfocus.com/bid/80176
- https://security.openstack.org/ossa/OSSA-2016-001.html