Read the docs
Red Hat Security Advisory

RHSA-2014:0231

openstack-nova security and bug fix update

Released 2014-03-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2013-05849 CVE-2013-7130 · GHSA-99rx-9x8v-9j8p

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver…

Priority LOW 36

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expect…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02438 Published 2014-02-06 Fixed in 12.0.0a0 CWE-200
TI-2013-05373 CVE-2013-6419 · GHSA-22w9-j288-8p9w

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1…

Priority LOW 27

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01852 Published 2014-01-07 Fixed in 12.0.0a0 CWE-200
TI-2013-05390 CVE-2013-6437 · GHSA-hrv9-4x4c-9jc8

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before…

Priority LOW 23

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with uniq…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02037 Published 2014-03-06 Partial fix · 12.0.0a0 CWE-399
TI-2013-05789 CVE-2013-7048 · GHSA-grp5-h379-j75x

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses…

Priority LOW 17

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and mo…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00479 Published 2014-01-23 Fixed in 12.0.0a0 CWE-264