CVE-2015-2687

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-09 · updated 2026-06-17
Weakness: CWE-284

Description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Affected products

OpenStack Compute: 2013.2, 2013.2.1, 2013.2.2, 2013.2.3, 2013.2.4, 2014.1 (+10)

References

http://www.openwall.com/lists/oss-security/2015/03/24/10
http://www.openwall.com/lists/oss-security/2015/03/25/3
http://www.securityfocus.com/bid/77505
https://bugs.launchpad.net/nova/+bug/1419577
https://bugzilla.redhat.com/show_bug.cgi?id=1205313
https://review.openstack.org/#/c/338929/
http://www.openwall.com/lists/oss-security/2015/03/24/10
http://www.openwall.com/lists/oss-security/2015/03/25/3
http://www.securityfocus.com/bid/77505
https://bugs.launchpad.net/nova/+bug/1419577
https://bugzilla.redhat.com/show_bug.cgi?id=1205313
https://review.openstack.org/#/c/338929/

Get alerted when CVE-2015-2687 or the next vulnerability affects your stack