CVE-2015-5247

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-14 · updated 2026-06-17
Weakness: CWE-284

Description

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 15.04, 15.10
libvirt: 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19

References

http://security.libvirt.org/2015/0003.html
http://www.ubuntu.com/usn/USN-2867-1
http://security.libvirt.org/2015/0003.html
http://www.ubuntu.com/usn/USN-2867-1

Get alerted when CVE-2015-5247 or the next vulnerability affects your stack