CVE-2015-5313

CVE-2015-5313 is a directory traversal vulnerability in libvirt (virStorageBackendFileSystemVolCreate in storage/storage_backend_fs.c) that can be exploited by a local user who has storage_vol:create rights but lacks domain:write, via a volume name containing .. to write arbitrary files when ACLs...