CVE-2015-5247
Fixed in a distro release EPSS 1%
The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.
Products: redhat libvirt, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 1.2.20-1 |
| Debian 13 | libvirt | 1.2.20-1 |
| Debian 14 | libvirt | 1.2.20-1 |
| Ubuntu 14.04 LTS | libvirt | 1.2.2-0ubuntu13.1.16 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |