CVE-2015-7548

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2016-0018.htmlThird Party Advisory
• http://www.securityfocus.com/bid/80176Third Party Advisory, VDB Entry
• https://security.openstack.org/ossa/OSSA-2016-001.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0018.htmlThird Party Advisory
• http://www.securityfocus.com/bid/80176Third Party Advisory, VDB Entry
• https://security.openstack.org/ossa/OSSA-2016-001.htmlVendor Advisory

Published

Jan 12, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7542A vulnerability exists in libgwenhywfar through 4.12.0 due t…5.3
• CVE-2015-7543aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly …
• CVE-2015-7544redhat-support-plugin-rhev in Red Hat Enterprise Virtualizat…
• CVE-2015-7545The (1) git-remote-ext and (2) unspecified other remote help…
• CVE-2015-7546The identity service in OpenStack Identity (Keystone) before…7.5
• CVE-2015-7547Multiple stack-based buffer overflows in the (1) send_dg and…
• CVE-2015-7549The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick E…
• CVE-2015-7550The keyctl_read_key function in security/keys/keyctl.c in th…
• CVE-2015-7551The Fiddle::Handle implementation in ext/fiddle/handle.c in …
• CVE-2015-7552Heap-based buffer overflow in the gdk_pixbuf_flip function i…
• CVE-2015-7553Race condition in the kernel in Red Hat Enterprise Linux 7, …
• CVE-2015-7554The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 al…