Red Hat Security AdvisoryRHSA-2013:0208
openstack-nova security and bug fix update
Released 2013-01-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenStack Folsom openstack-nova-2012.2.2-8.el6ost, openstack-nova-api-2012.2.2-8.el6ost, openstack-nova-cert-2012.2.2-8.el6ost +9
Fixes 2 records
Priority LOW 34
The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping paramete…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.02505 · Published 2013-02-13 · Fixed CWE-264
Priority LOW 32
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to ob…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.01339 · Published 2012-12-26 · Fixed in 2012.2.2-8.el6ost, 12.0.0a0 CWE-212
