CVE-2015-7548 OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read a...
LowCVSS 3.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nova(Debian:12) | < 2:13.0.0~rc3-1 | 2:13.0.0~rc3-1 |
| debian/nova(Debian:13) | < 2:13.0.0~rc3-1 | 2:13.0.0~rc3-1 |
| debian/nova(Debian:14) | < 2:13.0.0~rc3-1 | 2:13.0.0~rc3-1 |
| OpenStack Nova | >= 12.0.0, < 12.0.1 | 12.0.1 |
| OpenStack Nova | >= 2015.1.0, < 2015.1.3 | 2015.1.3 |
References
- Debian Security Tracker CVE-2015-7548 vendor-advisory
- RHSA-2016:0018 third-party-advisory vendor-advisory
- 80176 third-party-advisory vdb-entry
- security.openstack.org vendor-advisory