Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 10 Mar 2016 02:39:26 +0000
From: Tristan Cacqueray <>
Subject: [OSSA 2016-007.1] Nova host data leak through resize/migration
 (CVE-2016-2140) ERRATA

OSSA-2016-007.1: Nova host data leak through resize/migration

:Date: March 08, 2016
:CVE: CVE-2016-2140

- Nova: <=2015.1.3, >=12.0.0 <=12.0.2

Matthew Booth from Red Hat reported a vulnerability in Nova instance
resize/migration. By overwriting an ephemeral or root disk with a
malicious image before requesting a resize, an authenticated user may
be able to read arbitrary files from the compute host. Only setups
using libvirt driver with raw storage and setting "use_cow_images =
False" (not default) are affected.

The former fix did not take into account the usage of non-disk-image
backends and caused a regression for this use-case. This update
provides an additional fix for that issue.

- - original (Kilo)
- - errata   (Kilo)
- - original (Liberty)
- - errata   (Liberty)
- - original (Mitaka)
- - errata   (Mitaka)

- Matthew Booth from Red Hat (CVE-2016-2140)


OSSA History
- 2016-03-09 - Errata 1
- 2016-03-08 - Original Version

Tristan Cacqueray
OpenStack Vulnerability Management Team

Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ