GitHub Advisoryadvisory · PyPI

GHSA-hqfx-4x4w-vmwp Openstack nova qcow format could expose host filesystem information

LOW Published 2022-04-22 Modified 2024-05-09 Official page ↗
Aliases
CVE-2011-3147
Ecosystem
PyPI
Packages
nova
Severity
Low
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-05-09

Affected packages

• PyPI nova: < 12.0.0a0 → fixed in 12.0.0a0

Description

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.

Related

Alias · CVE (1)

  • CVE-2011-3147 Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References