CVE-2016-2140 OpenStack Nova host data access through resize/migration
MediumCVSS 5.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nova(PyPI) | >= 12.0.0, < 12.0.3 | 12.0.3 |
| debian/nova(Debian:12) | < 2:13.0.0-1 | 2:13.0.0-1 |
| debian/nova(Debian:13) | < 2:13.0.0-1 | 2:13.0.0-1 |
| debian/nova(Debian:14) | < 2:13.0.0-1 | 2:13.0.0-1 |
| OpenStack Nova | >= 12.0.0, < 12.0.3 | 12.0.3 |
| OpenStack Nova | >= 2015.1.0, < 2015.1.4 | 2015.1.4 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugs.launchpad.net third-party-advisory
- bugzilla.redhat.com
- github.com product
- security.openstack.org patch vendor-advisory
- seclists.org
- [oss-security] 20160308 Re: [OSSA 2016-007] Nova host data leak through resize/migration (CVE-2016-2140) mailing-list third-party-advisory
- 84277 third-party-advisory vdb-entry
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-2140 vendor-advisory