CVE-2011-3147

HIGH

Openstack Nova < 2012.1 - Information Disclosure

Title source: rule

Description

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.

References (1)

[Patch, Third Party Advisory] http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604

Scores

CVSS v3 8.6

EPSS 0.0018

EPSS Percentile 39.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (2)

openstack/nova < 2012.1

pypi/nova < 12.0.0a0PyPI

Timeline

Published Apr 22, 2019

Tracked Since Feb 18, 2026