Vulnerability Details : CVE-2015-5313
Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
Vulnerability category: Directory traversal
Products affected by CVE-2015-5313
- cpe:2.3:a:redhat:libvirt:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-5313
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-5313
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
1.9
|
LOW | AV:L/AC:M/Au:N/C:N/I:P/A:N |
3.4
|
2.9
|
NIST | |
2.5
|
LOW | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N |
1.0
|
1.4
|
NIST |
CWE ids for CVE-2015-5313
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-5313
-
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5f818d7
libvirt.org Git
-
http://www.securityfocus.com/bid/90913
libvirt CVE-2015-5313 Local Directory Traversal Vulnerability
-
https://security.gentoo.org/glsa/201612-10
libvirt: Directory traversal (GLSA 201612-10) — Gentoo security
-
http://security.libvirt.org/2015/0004.html
Libvirt Security Notice: LSN-2015-0004Patch;Vendor Advisory
-
https://www.redhat.com/archives/libvir-list/2015-December/msg00473.html
[libvirt] [PATCH] CVE-2015-5313: storage: don't allow '/' in filesystem
-
http://rhn.redhat.com/errata/RHSA-2016-2577.html
-
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174404.html
[SECURITY] Fedora 23 Update: libvirt-1.2.18.2-1.fc23
Jump to