CVE-2016-2140

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to…

published April 12, 2016

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02108 · 81.5th percentile
Published
2016-04-12T14:00Z
EPSS history
Timeline
  • 12 APR 14:00Z
    The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to…
    cvelistv5