CVE-2016-2140

Опубликовано: 12 апр. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 3.5

EPSS Низкий

Описание

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

Ссылки

http://www.openwall.com/lists/oss-security/2016/03/08/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/84277
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/nova/+bug/1548450
Third Party Advisory
https://security.openstack.org/ossa/OSSA-2016-007.html
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/03/08/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/84277
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/nova/+bug/1548450
Third Party Advisory
https://security.openstack.org/ossa/OSSA-2016-007.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*

Версия от 12.0.0 (включая) до 12.0.3 (исключая)

cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*

Версия от 2015.1.0 (включая) до 2015.1.4 (исключая)

EPSS

Процентиль: 70%

0.00634

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-2140

CVSS3: 5.3

ubuntu

почти 10 лет назад

CVE-2016-2140

redhat

почти 10 лет назад

CVE-2016-2140

CVSS3: 5.3

debian

почти 10 лет назад

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) ...

GHSA-49jv-37hm-6gfp

CVSS3: 5.3

github

больше 3 лет назад

OpenStack Nova host data access through resize/migration

EPSS

Процентиль: 70%

0.00634

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-200