Lucene search
RedhatCVELIST:CVE-2015-5313HistoryApr 11, 2016 - 9:00 p.m.
CVE-2015-5313
2016-04-1121:00:00
redhat
www.cve.org
12
Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a … (dot dot) in a volume name.
References
libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5f818d7
lists.fedoraproject.org/pipermail/package-announce/2015-December/174404.html
rhn.redhat.com/errata/RHSA-2016-2577.html
security.libvirt.org/2015/0004.html
www.securityfocus.com/bid/90913
security.gentoo.org/glsa/201612-10
www.redhat.com/archives/libvir-list/2015-December/msg00473.html
Related
mageia
mageia
Updated libvirt packages fix security vulnerability
2016-03-10 01:57:53
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.3.0-alt1
2015-12-18 00:00:00
cve
cve
CVE-2015-5313
2016-04-11 21:59:04
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-2016-77)
2016-01-26 00:00:00
Fedora 23 : libvirt-1.2.18.2-1.fc23 (2015-30b347dff1)
2016-03-04 00:00:00
Fedora 22 : libvirt-1.2.13.2-1.fc22 (2015-2c9678da8c)
2016-03-04 00:00:00
freebsd
freebsd
libvirt -- ACL bypass using ../ to access beyond storage pool
2015-10-30 00:00:00
debiancve
debiancve
CVE-2015-5313
2016-04-11 21:59:04
fedora
fedora
[SECURITY] Fedora 22 Update: libvirt-1.2.13.2-1.fc22
2016-01-08 03:35:48
[SECURITY] Fedora 23 Update: libvirt-1.2.18.2-1.fc23
2015-12-28 23:01:08
ubuntucve
ubuntucve
CVE-2015-5313
2015-12-18 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0103)
2016-03-10 00:00:00
Fedora Update for libvirt FEDORA-2015-2
2016-01-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:0931-1)
2021-06-09 00:00:00
veracode
veracode
Directory Traversal
2018-07-20 08:56:18
gentoo
gentoo
libvirt: Directory traversal
2016-12-04 00:00:00
prion
prion
Directory traversal
2016-04-11 21:59:00
nvd
nvd
CVE-2015-5313
2016-04-11 21:59:04
ibm
ibm
oraclelinux
oraclelinux
libvirt security, bug fix, and enhancement update
2016-11-09 00:00:00
centos
centos
libvirt security update
2016-11-25 15:59:54
redhat
redhat
(RHSA-2016:2577) Moderate: libvirt security, bug fix, and enhancement update
2016-11-03 06:07:14
ubuntu
ubuntu
libvirt vulnerabilities
2016-01-12 00:00:00
osv
osv