VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 14, 2016· Updated Jun 17, 2026

CVE-2015-5247

CVE-2015-5247

Description

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Red Hat/Libvirt6 versions
    cpe:2.3:a:redhat:libvirt:1.2.14:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:redhat:libvirt:1.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.15:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.16:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.17:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.18:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.19:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
  • Libvirt/Libvirtllm-fuzzy
    Range: >=1.2.14, <=1.2.19
  • osv-coords
    pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
    Range: < 2.5.0-1.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.