Comment 35 for bug 1221190
Revision history for this message
| Tristan Cacqueray (tristan-cacqueray) wrote Re: Image format not enforced when using rescue | #35 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
73416ba
(Get the code!)
Many thanks for your review Thierry, I removed the technical details.
Draft impact description #2 -
Title: Host data leak to instance in rescue mode
Reporter: Stanislaw Pitucha (HP)
Products: Nova
Affects: All supported versions
Description:
Stanislaw Pitucha from Hewlett Packard reported a vulnerability in the Nova instance rescue mode. By overwriting the disk inside an instance with a malicious image and switching the instance to rescue mode an authenticated user would be able to leak an arbitrary file from the compute host to the virtual instance. Note that the host file must be readable by the libvirt/kvm context to be exposed. Only setups using libvirt to spawn instance, and having "use_cow_images = False" in Nova configuration are affected.