OpenStack Nova host data access through resize/migration

MEDIUM 5.3CVE-2016-2140 · GHSA-49jv-37hm-6gfp · PYSEC-2026-864 · Published 12/04/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
nova PyPI	`≥ 12.0.0, < 12.0.3`	`12.0.3`
nova openstack	`≥ 12.0.0, < 12.0.3≥ 2015.1.0, < 2015.1.4`	`12.0.32015.1.4`

Description

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2016-2140 · ADVISORY
openstack/nova commit 0b19418 · WEB
openstack/nova commit 116b121 · WEB
openstack/nova commit f302bf0 · WEB
access.redhat.com/errata/RHSA-2016:0363 · WEB
access.redhat.com/errata/RHSA-2016:0364 · WEB
access.redhat.com/errata/RHSA-2016:0365 · WEB
access.redhat.com/errata/RHSA-2016:0366 · WEB
access.redhat.com/security/cve/CVE-2016-2140 · WEB
bugs.launchpad.net/nova/+bug/1548450 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
openstack/nova · PACKAGE
security.openstack.org/ossa/OSSA-2016-007.html · WEB
seclists.org/oss-sec/2016/q1/563 · WEB
openwall.com/lists/oss-security/2016/03/08/6 · WEB
securityfocus.com/bid/84277 · WEB
pypi.org/project/nova · PACKAGE
GitHub Advisory GHSA-49jv-37hm-6gfp · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free