Red Hat Security Advisory

RHSA-2014:0940

openstack-nova security and bug fix update

Released 2014-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-nova-2014.1.1-4.el7ost, openstack-nova-api-2014.1.1-4.el7ost, openstack-nova-cells-2014.1.1-4.el7ost +11

Fixes 1 record

TI-2014-02843 CVE-2014-3517 · GHSA-xjmj-p278-4jp5

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before…

LOW 24

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01954 Published 2014-08-07 Partial fix · 2013.2.4, 2014.1.2 CWE-200