medium
5.3
CWE
200
Advisory Published
CVE Published
Advisory Published
Updated

CVE-2016-2140: Infoleak

First published: Tue Mar 01 2016(Updated: )

It was reported that by overwriting an ephemeral or root disk with a malicious image before requesting a resize, an authenticated user may be able to read arbitrary files from the compute host. Only setups using libvirt driver with raw storage and setting "use_cow_images = False" (not default) are affected. Affected versions: <=2015.1.2, >=12.0.0 <=12.0.2

Credit: secalert@redhat.com secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
OpenStack Nova>=12.0.0<12.0.3
OpenStack Nova>=2015.1.0<2015.1.4
pip/nova>=12.0.0<12.0.3
12.0.3
>=12.0.0<12.0.3
>=2015.1.0<2015.1.4

Remedy

https://security.openstack.org/ossa/OSSA-2016-007.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2016-2140?

    CVE-2016-2140 is considered a moderate severity vulnerability due to its ability to allow authenticated users to read arbitrary files on the compute host.

  • How do I fix CVE-2016-2140?

    To fix CVE-2016-2140, upgrade OpenStack Nova to version 12.0.3 or higher, or to version 2015.1.4 if using older releases.

  • What systems are affected by CVE-2016-2140?

    CVE-2016-2140 affects OpenStack Nova versions between 12.0.0 and 12.0.3, as well as versions between 2015.1.0 and 2015.1.4 when using the libvirt driver with specific configurations.

  • Can an unauthenticated user exploit CVE-2016-2140?

    No, CVE-2016-2140 can only be exploited by authenticated users who have access to the compute host.

  • What conditions must be met for CVE-2016-2140 to be exploitable?

    CVE-2016-2140 is exploitable only on setups using the libvirt driver with raw storage and where 'use_cow_images' is set to False.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203