Red Hat Security Advisory

RHSA-2013:0709

openstack-nova security and bug fix update

Released 2013-04-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenStack Folsom openstack-nova-2012.2.3-7.el6ost, openstack-nova-api-2012.2.3-7.el6ost, openstack-nova-cert-2012.2.3-7.el6ost +9

Fixes 2 records

TI-2013-00265 CVE-2013-0335 · GHSA-qfp8-hfqx-c79c

Openstack nova: vnc proxy can connect to the wrong vm

LOW 37

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0214 Published 2013-03-22 Fixed in 2012.2.3-7.el6ost, 12.0.0a0 CWE-613

TI-2013-01621 CVE-2013-1838 · GHSA-63fq-8fp9-vhwq

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly…

LOW 24

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failu…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02742 Published 2013-03-22 Fixed in 12.0.0a0 CWE-399