Read the docs
Red Hat Security Advisory

RHSA-2013:1199

openstack-nova security and bug fix update

Released 2013-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2013-02016 CVE-2013-2256 · GHSA-5mj6-643f-2g85

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly…

Priority LOW 31

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor prope…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01844 Published 2013-09-16 Partial fix · 2013.1.3 CWE-264
TI-2013-03652 CVE-2013-4179 · GHSA-j6xh-q826-55jw

The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before…

Priority LOW 25

The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expan…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02725 Published 2013-09-16 Partial fix · 2013.2 CWE-119
TI-2013-03658 CVE-2013-4185 · GHSA-ph2h-hh49-vh27

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and…

Priority LOW 23

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users t…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02105 Published 2013-10-29 Partial fix · 12.0.0a0 CWE-310
TI-2013-03730 CVE-2013-4261 · GHSA-6h2f-6j38-qxpp

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC…

Priority LOW 20

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01738 Published 2013-10-29 Partial fix CWE-119