Sensitive Information Exposure in libvirt: CVE-2015-5160
Summary
UBUNTU-CVE-2015-5160: libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing. Affects libvirt versions 1.1.1-0ubuntu8 – 1.2.2-0ubuntu9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libvirt is an open-source API, daemon, and management tool for managing platform virtualization. It provides a consistent way to manage different virtualization technologies, including KVM, QEMU, and Xen. The package is widely used in cloud computing and virtualization environments. However, it has been found to expose sensitive Ceph credentials in command-line arguments, which can be accessed by local users.
Vulnerability Detail
The vulnerability identified as CVE-2015-5160 affects libvirt versions prior to 2.2. It allows local users to view sensitive Ceph credentials included in the qemu command line when using RADOS Block Device (RBD). This exposure can lead to unauthorized access to storage resources, potentially compromising the integrity and confidentiality of the data stored in Ceph. The issue arises from the way libvirt handles command-line arguments, inadvertently including sensitive information that should remain confidential.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to the command line or use alternative methods to manage Ceph credentials, such as environment variables or configuration files that do not expose sensitive information in process listings.
Conclusion
CVE-2015-5160 is a significant vulnerability in libvirt that can lead to the exposure of sensitive Ceph credentials. It is crucial for users to update their libvirt installations to the latest patched versions to mitigate this risk. Additionally, utilizing workarounds can help protect sensitive information until an update can be applied.
See every vulnerability recorded for libvirt →
FAQ
CVE-2015-5160 is a vulnerability in libvirt that exposes sensitive Ceph credentials in command-line arguments, allowing local users to access this information.
libvirt versions prior to 2.2 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of CVE-2015-5160 is 5.5, indicating a medium severity level.
If an immediate update is not possible, consider implementing workarounds such as restricting command line access or using secure methods to manage credentials.
Related vulnerabilities
Recent vulnerabilities recorded for libvirt.
