{"id":"CVE-2015-5160","aliases":["DEBIAN-CVE-2015-5160","EUVD-2015-5170","GHSA-57w8-4258-hhvg","RHSA-2016:2577","UBUNTU-CVE-2015-5160"],"status":"published","title":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00413,"percentile":0.3592,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2018-08-20T21:00:00Z","modified":"2026-09-09T07:01:00Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["2.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["2.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["2.2.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1","1.2.2-0ubuntu13.1.28+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31","1.3.1-1ubuntu10.31+esm1"]}],"products":[{"vendor":"libvirt","product":"libvirt"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"virtualization"}],"references":[{"url":"https://wiki.openstack.org/wiki/OSSN/OSSN-0079","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245647","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2577.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.launchpad.net/ossn/+bug/1686743","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/07/21/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5160","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-57w8-4258-hhvg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5160","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2577","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=921135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=986365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=997561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1002423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1004593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1004602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1026136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1051350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1195176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1197592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1209802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1215968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1216281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1227880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1261432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1294617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1345743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377212","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2577.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5160","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5313","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5313","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5313","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5008","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5008","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-5160","tags":["report"]},{"url":"https://www.redhat.com/archives/libvir-list/2011-November/msg00853.html","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5160","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:00:00Z","modified":"2024-08-06T06:41:07.967Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2015-5170","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:00:00Z","modified":"2024-08-06T06:41:07Z","updated_at":"2026-11-03T02:22:01.305851Z"}],"ghsa":[{"id":"GHSA-57w8-4258-hhvg","title":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2022-05-13T01:14:41Z","modified":"2023-02-01T05:04:18Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:08.898362Z"}],"nvd":[{"id":"CVE-2015-5160","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:29:00.277Z","modified":"2026-06-17T00:28:34.967Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:19.244941Z"}],"osv":[{"id":"CVE-2015-5160","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:29:00Z","modified":"2026-04-10T03:45:19.863059Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-5160","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:29:00.277Z","modified":"2026-09-09T07:01:00.61781296Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"RHSA-2016:2577","title":"Red Hat Security Advisory: libvirt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T11:06:00Z","modified":"2026-06-29T10:14:22Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2015-5160","description":"libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.","status":"published","published":"2018-08-20T21:29:00Z","modified":"2026-08-20T00:00:13.51107699Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:10.385269Z"}]}}