CVE-2015-5313 Path traversal in n/a

What is CVE-2015-5313?

CVE-2015-5313 is a low-severity path traversal vulnerability in Redhat Libvirt, published on 11 Apr 2016. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.

Weakness: CWE-22

Which versions are affected by CVE-2015-5313?

It affects 1 product.

Products include Redhat Libvirt.

How do I fix CVE-2015-5313?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2015-5313 being exploited?

There is no known exploitation of CVE-2015-5313 in the wild and no public exploit code.

Other vulnerabilities in Redhat Libvirt

• CVE-2013-4401 Missing authorization in n/a High 8.5
• CVE-2017-2635 Null dereference in libvirt High 7.7
• CVE-2013-4400 Privilege escalation in n/a High 7.2
• CVE-2013-4291 Privilege escalation in n/a Medium 6.9
• CVE-2011-1146 Missing authorization in n/a Medium 6.9

All Redhat Libvirt vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-5313, GHSA-qr2q-8mvm-hxvr, MGASA-2016-0103, SUSE-SU-2016:0923-1, SUSE-SU-2016:0931-1, UBUNTU-CVE-2015-5313.