CVE-2011-3147

HIGH

OpenStack Nova < 2012.1 - Unauthorized Sensitive Information Exposure via Malicious QCow Filesystem

Title source: llm
STIX 2.1

Description

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.

References (1)

Core 1
Core References
Patch, Third Party Advisory x_refsource_misc
http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604

Scores

CVSS v3 8.6
EPSS 0.0018
EPSS Percentile 39.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
openstack/nova 2010.1 - 2012.1
pypi/nova 0 - 12.0.0a0PyPI
Published Apr 22, 2019
Tracked Since Feb 18, 2026