CVE-2015-5160
Fixed in a distro release EPSS <1%
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
Products: libvirt, redhat virtualization, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 2.2.0-1 |
| Debian 13 | libvirt | 2.2.0-1 |
| Debian 14 | libvirt | 2.2.0-1 |
| Red Hat Enterprise Linux 7 | libvirt | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-client | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-network | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-config-nwfilter | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-interface | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-lxc | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-network | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nodedev | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-nwfilter | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-qemu | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-secret | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-driver-storage | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-kvm | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-daemon-lxc | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-debuginfo | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-devel | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-docs | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-lock-sanlock | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-login-shell | 0:2.0.0-10.el7 |
| Red Hat Enterprise Linux 7 | libvirt-nss | 0:2.0.0-10.el7 |
| Red Hat storage 3.1 server el7 | libvirt-daemon-lxc | 0:2.0.0-10.el7 |
| Red Hat storage 3.1 server el7 | libvirt-debuginfo | 0:2.0.0-10.el7 |
| Red Hat storage 3.1 server el7 | libvirt-lock-sanlock | 0:2.0.0-10.el7 |
| Red Hat storage 3.1 server el7 | libvirt-login-shell | 0:2.0.0-10.el7 |
| Ubuntu Pro 14.04 LTS | libvirt | no fix |
| Ubuntu Pro 16.04 LTS | libvirt | no fix |