{"id":"CVE-2016-2140","published":"2016-04-12T14:00:00Z","modified":"2024-08-05T23:17:50Z","title":"The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using…","vendor":null,"product":null,"tier":"tail","description":{"text":"The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02108,"percentile":0.817,"provenance":"source"},"cwes":[],"references":[{"url":"https://bugs.launchpad.net/nova/+bug/1548450","tags":["x_refsource_CONFIRM"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-007.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/84277","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/08/6","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":16.3,"factors":[{"name":"EPSS percentile","points":16.34}]},"affected":[{"ecosystem":"PyPI","package":"nova","vulnerableRanges":[">=12.0.0, <12.0.3"],"patched":["12.0.3"],"from":["GHSA-49jv-37hm-6gfp","PYSEC-2026-864"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2346","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-nova-cve-2016-2140","children":[{"from":"CVE-2016-2140","to":"CVE-2017-18191","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["nova/virt/libvirt/driver.py"],"commits":["https://github.com/openstack/nova/commit/0b194187db9da28225cb5e62be3b45aff5a1c793","https://github.com/openstack/nova/commit/116b1210ab772c55d1ed1f715687d83877c92701","https://github.com/openstack/nova/commit/0225a61fc4557c1257383a654f0741f7ef2ddeac","https://github.com/openstack/nova/commit/5b64a1936122eeb35f37a09f9d38159e1a224c58"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2014-2573","published":"2014-03-25","fixed":"12.0.0a0","kev":false},{"cve":"CVE-2014-8333","published":"2014-10-31","fixed":"12.0.0a0","kev":false},{"cve":"CVE-2015-8749","published":"2016-01-15","fixed":"12.0.1","kev":false,"link":{"from":"CVE-2015-8749","to":"CVE-2016-2140","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:nova","fromFixed":"12.0.1","toFixed":"12.0.3","daysApart":88}]}},{"cve":"CVE-2016-2140","published":"2016-04-12","fixed":"12.0.3","kev":false},{"cve":"CVE-2015-5162","published":"2016-10-07","fixed":"12.0.4","kev":false,"link":{"from":"CVE-2016-2140","to":"CVE-2015-5162","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:nova","fromFixed":"12.0.3","toFixed":"12.0.4","daysApart":178}]}},{"cve":"CVE-2015-2687","published":"2017-08-09","fixed":"15.0.0.0b1","kev":false},{"cve":"CVE-2017-7214","published":"2017-03-21","fixed":"15.0.2","kev":false}],"package":"PyPI:nova"}}