CVE-2015-5160 PUBLISHED

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

EPSS 0.14% · 34.7th percentile

Risk Scores

EPSS Score
0.14%
34.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibvirt0, 1.2.16-2ubuntu11, 1.2.16-2ubuntu12
Ubuntu:Pro:14.04:LTSlibvirt1.2.2-0ubuntu13.1.20, 1.2.2-0ubuntu13.1.21, 1.2.2-0ubuntu13.1.22

Timeline

References

Open in Interactive Console →