| Package | Affected versions | Patched versions |
|---|---|---|
| ovirt-engine | ≥ 4.1.0, < 4.1.9 | 4.1.9 |
A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free