CVE-2015-2687

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Weaknesses (CWE)

CWE-284

Affected Products (16)

openstack · computevulnerable

References (12)

http://www.openwall.com/lists/oss-security/2015/03/24/10

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/25/3

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/77505

Third Party AdvisoryVDB Entry

https://bugs.launchpad.net/nova/+bug/1419577

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1205313

Issue TrackingThird Party AdvisoryVDB Entry

https://review.openstack.org/#/c/338929/

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/24/10

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/25/3

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/77505

Third Party AdvisoryVDB Entry

https://bugs.launchpad.net/nova/+bug/1419577

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1205313

Issue TrackingThird Party AdvisoryVDB Entry

https://review.openstack.org/#/c/338929/

Third Party Advisory