{"id":"CVE-2015-7548","aliases":["DEBIAN-CVE-2015-7548","EUVD-2015-7462","GHSA-6q7v-7634-xrvf","RHSA-2016:0017","RHSA-2016:0018","SUSE-SU-2016:2325-1","UBUNTU-CVE-2015-7548","USN-3449-1"],"status":"published","title":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using...","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","severity":{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01803,"percentile":0.78686,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2016-01-12T00:00:00Z","modified":"2026-09-09T07:01:13Z","fixes":[{"ecosystem":"Debian:12","package":"nova","fixed_in":["2:13.0.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2:13.0.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2:13.0.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-api","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cells","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cert","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-common","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-compute","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-conductor","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-console","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-doc","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-network","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-novncproxy","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-objectstore","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-scheduler","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-serialproxy","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"python-nova","fixed_in":["0:2014.1.5-15.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-api","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-cells","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-cert","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-common","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-compute","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-conductor","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-console","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-doc","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-network","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-novncproxy","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-objectstore","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-scheduler","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-serialproxy","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"python-nova","fixed_in":["0:2014.2.3-48.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-api","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-cells","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-cert","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-common","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-compute","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-conductor","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-console","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-doc","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-network","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-novncproxy","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-objectstore","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-scheduler","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-serialproxy","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-spicehtml5proxy","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:7::el7","package":"python-nova","fixed_in":["0:2015.1.2-13.el7ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nova","fixed_in":["1:2014.1.5-0ubuntu1.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.0.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.0.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.0.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-16.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.5-15.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-48.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2015.1.2-13.el7ost"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2014.1.5-0ubuntu1.7"}]}],"versions":["1:2013.2~rc2-0ubuntu1","1:2013.2-0ubuntu1","1:2014.1~b1-0ubuntu1","1:2014.1~b1-0ubuntu2","1:2014.1~b2-0ubuntu3","1:2014.1~b2-0ubuntu4","1:2014.1~b3-0ubuntu1","1:2014.1~b3-0ubuntu2","1:2014.1~rc1-0ubuntu1","1:2014.1~rc2-0ubuntu1","1:2014.1-0ubuntu1","1:2014.1-0ubuntu1.2","1:2014.1.1-0ubuntu1","1:2014.1.1-0ubuntu2","1:2014.1.2-0ubuntu1","1:2014.1.2-0ubuntu1.1","1:2014.1.3-0ubuntu1","1:2014.1.3-0ubuntu1.1","1:2014.1.3-0ubuntu2","1:2014.1.4-0ubuntu2","1:2014.1.4-0ubuntu2.1","1:2014.1.5-0ubuntu1","1:2014.1.5-0ubuntu1.1","1:2014.1.5-0ubuntu1.2","1:2014.1.5-0ubuntu1.3","1:2014.1.5-0ubuntu1.4","1:2014.1.5-0ubuntu1.5","1:2014.1.5-0ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2014.1.5-0ubuntu1.7"}]}],"versions":["1:2013.2~rc2-0ubuntu1","1:2013.2-0ubuntu1","1:2014.1~b1-0ubuntu1","1:2014.1~b1-0ubuntu2","1:2014.1~b2-0ubuntu3","1:2014.1~b2-0ubuntu4","1:2014.1~b3-0ubuntu1","1:2014.1~b3-0ubuntu2","1:2014.1~rc1-0ubuntu1","1:2014.1~rc2-0ubuntu1","1:2014.1-0ubuntu1","1:2014.1-0ubuntu1.2","1:2014.1.1-0ubuntu1","1:2014.1.1-0ubuntu2","1:2014.1.2-0ubuntu1","1:2014.1.2-0ubuntu1.1","1:2014.1.3-0ubuntu1","1:2014.1.3-0ubuntu1.1","1:2014.1.3-0ubuntu2","1:2014.1.4-0ubuntu2","1:2014.1.4-0ubuntu2.1","1:2014.1.5-0ubuntu1","1:2014.1.5-0ubuntu1.1","1:2014.1.5-0ubuntu1.2","1:2014.1.5-0ubuntu1.3","1:2014.1.5-0ubuntu1.4","1:2014.1.5-0ubuntu1.5","1:2014.1.5-0ubuntu1.6"],"bundled":7}],"products":[{"vendor":"openstack","product":"nova"}],"references":[{"url":"http://www.securityfocus.com/bid/80176","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0018.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-001.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7548","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6q7v-7634-xrvf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7548","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0017","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290511","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0017.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7548","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7713","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0018","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0018.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162325-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/929628","tags":["report"]},{"url":"https://bugzilla.suse.com/960015","tags":["report"]},{"url":"https://bugzilla.suse.com/960601","tags":["report"]},{"url":"https://bugzilla.suse.com/967356","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7548","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-7548","tags":["report"]},{"url":"http://lists.openstack.org/pipermail/openstack-announce/2016-January/000911.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3449-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-3280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2140","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-7548","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T19:00:00Z","modified":"2024-08-06T07:51:28.584Z","updated_at":"2026-11-02T14:35:44.744952Z"}],"euvd":[{"id":"EUVD-2015-7462","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T19:00:00Z","modified":"2024-08-06T07:51:28Z","updated_at":"2026-11-03T02:21:52.097705Z"}],"ghsa":[{"id":"GHSA-6q7v-7634-xrvf","title":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using...","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2022-05-14T01:58:44Z","modified":"2023-02-02T05:04:52Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:58.811434Z"}],"nvd":[{"id":"CVE-2015-7548","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T19:59:06.017Z","modified":"2026-06-17T00:32:43.73Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:15.746629Z"}],"osv":[{"id":"CVE-2015-7548","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T19:59:06Z","modified":"2026-04-10T03:45:26.272949Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-7548","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T19:59:06.017Z","modified":"2026-09-09T07:01:13.481597303Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-7548","description":"OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.","status":"published","published":"2016-01-12T00:00:00Z","modified":"2026-02-04T04:15:24.426906Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"RHSA-2016:0017","title":"Red Hat Security Advisory: openstack-nova security advisory","status":"published","published":"2024-09-13T09:47:36Z","modified":"2026-08-01T10:02:32Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0018","title":"Red Hat Security Advisory: openstack-nova security update","status":"published","published":"2024-09-13T09:46:59Z","modified":"2026-08-01T10:02:33Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2016:2325-1","title":"Security update for openstack-keystone, openstack-nova, and openstack-swift","description":"\nThis update for openstack-keystone, openstack-nova, and openstack-swift fixes the following issues: \n\n- Fix hybrid backend from keystone v3 (bsc#967356)\n- Fix cleanup when block migration fails (bsc#960015)\n- Avoid host data leak (bsc#960601, CVE-2015-7548)\n- Fix init script for openstack-swift-object-expirer\n- Mark backend_argument as secret (bsc#929628, CVE-2015-3646)\n        \n","status":"published","published":"2016-09-16T12:10:42Z","modified":"2026-02-04T03:46:45.725186Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3449-1","title":"nova vulnerabilities","description":"George Shuklin discovered that OpenStack Nova incorrectly handled the\nmigration process. A remote authenticated user could use this issue to\nconsume resources, resulting in a denial of service. (CVE-2015-3241)\n\nGeorge Shuklin and Tushar Patil discovered that OpenStack Nova incorrectly\nhandled deleting instances. A remote authenticated user could use this\nissue to consume disk resources, resulting in a denial of service.\n(CVE-2015-3280)\n\nIt was discovered that OpenStack Nova incorrectly limited qemu-img calls. A\nremote authenticated user could use this issue to consume resources,\nresulting in a denial of service. (CVE-2015-5162)\n\nMatthew Booth discovered that OpenStack Nova incorrectly handled snapshots.\nA remote authenticated user could use this issue to read arbitrary files.\n(CVE-2015-7548)\n\nSreekumar S. and Suntao discovered that OpenStack Nova incorrectly applied\nsecurity group changes. A remote attacker could possibly use this issue to\nbypass intended restriction changes by leveraging an instance that was\nrunning when the change was made. (CVE-2015-7713)\n\nMatt Riedemann discovered that OpenStack Nova incorrectly handled logging.\nA local attacker could possibly use this issue to obtain sensitive\ninformation from log files. (CVE-2015-8749)\n\nMatthew Booth discovered that OpenStack Nova incorrectly handled certain\nqcow2 headers. A remote authenticated user could possibly use this issue to\nread arbitrary files. (CVE-2016-2140)\n","status":"published","published":"2017-10-11T11:46:58Z","modified":"2026-02-10T04:41:13Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}