Files
CVEs-PoC/2015/CVE-2015-5313.md
T
2025-09-29 21:09:30 +02:00

802 B

CVE-2015-5313

Description

Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.

POC

Reference

No PoCs from references.

Github