Description
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2:13.0.0~rc3-1 | — |
| Debian 13 | nova | 2:13.0.0~rc3-1 | — |
| Debian 12 | nova | 2:13.0.0~rc3-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | nova | 1:2014.1.5-0ubuntu1.7 | USN-3449-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 7 | python-nova +15 | 2015.1.2-13.el7ost | RHSA-2016:0018 |
| Red Hat OpenStack 6 | python-nova +14 | 2014.2.3-48.el7ost | RHSA-2016:0018 |
| Red Hat OpenStack 5 | python-nova +14 | 2014.1.5-15.el7ost | RHSA-2016:0018, RHSA-2016:0017 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 5 | openstack-keystone | 2014.2.4.juno-17.1 | SUSE-SU-2016:2325-1 |
| SUSE OpenStack Cloud 5 | openstack-keystone-doc | 2014.2.4.juno-17.2 | SUSE-SU-2016:2325-1 |
| SUSE OpenStack Cloud 5 | openstack-nova +1 | 2014.2.4.juno-29.1 | SUSE-SU-2016:2325-1 |
| SUSE OpenStack Cloud 5 | openstack-swift +1 | 2.1.0-14.1 | SUSE-SU-2016:2325-1 |
Advisories 4
- RHSA-2016:0018 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Aug 1, 2026
- RHSA-2016:0017 Red Hat Security Advisory: openstack-nova security advisory Red Hat Security Advisories (RHSA) · Aug 1, 2026
- USN-3449-1 nova vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2016:2325-1 Security update for openstack-keystone, openstack-nova, and openstack-swift SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 80176 vdb-entry
- RHSA-2016:0018 vendor-advisory
- https://security.openstack.org/ossa/OSSA-2016-001.html