CVE-2011-3147: Openstack Nova

High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days.

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.

Affected products

• Openstack Nova: from 2010.1, before 2012.1 (fixed in 2012.1)

Published 2019-04-22. Last modified 2026-06-16.