CVE-2015-0237
Red Hat Enterprise Virtualization Manager < 3.5.1 - Authenticated Denial of Service via Snapshot Chain Creation
Title source: llmDescription
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032231
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0888.html
Scores
EPSS
0.0159
EPSS Percentile
73.1%
Details
CWE
CWE-264
Status
published
Products (1)
redhat/enterprise_virtualization_manager
< 3.5.0
Published
May 01, 2015
Tracked Since
Feb 18, 2026