CVE-2015-5247: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.04 only; version 15.10 only
• Red Hat Libvirt: version 1.2.14 only; version 1.2.15 only; version 1.2.16 only; version 1.2.17 only; version 1.2.18 only; version 1.2.19 only

Published 2016-04-14. Last modified 2026-06-17.