CVE-2016-2140

5.3 mediumEPSS 2.1%

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openstack:nova

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-49jv-37hm-6gfp	PyPI	nova	>=12.0.0 <12.0.3	12.0.3
PYSEC-2026-864	PyPI	nova	>=12.0.0 <12.0.3	12.0.3

References

http://www.openwall.com/lists/oss-security/2016/03/08/6
http://www.securityfocus.com/bid/84277
https://bugs.launchpad.net/nova/+bug/1548450
https://security.openstack.org/ossa/OSSA-2016-007.html
http://www.openwall.com/lists/oss-security/2016/03/08/6

Check your stack JSON