CVE-2015-7548

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false…

published January 12, 2016

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01803 · 78.2th percentile
Published
2016-01-12T19:00Z
EPSS history
Timeline
  • 12 JAN 19:00Z
    OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false…
    cvelistv5