openstack nova folsom vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote malicious users to cause a denial of service (resource consump...

Openstack Cinder Folsom -Openstack Keystone Essex -Openstack Folsom -Openstack Grizzly -Openstack Compute \\(nova\\) Essex -Openstack Compute \\(nova\\) Folsom -

3.5

CVSSv2

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number...

Openstack Nova Folsom Openstack Nova 2012.1 Openstack Nova 2011.3

4.9

CVSSv2

virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x prior to 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability...

Openstack Nova 2012.1 Openstack Folsom

1.9

CVSSv2

OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual si...

Openstack Havana -Openstack Grizzly -Openstack Folsom -

2.1

CVSSv2

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix fo...

Openstack Havana -Openstack Grizzly -Openstack Folsom -

4.3

CVSSv2

OpenStack Compute (Nova) Folsom prior to 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows malicious users to obtain sensitive information by reading the memory of ...

Openstack Folsom 2012.2 Openstack Grizzly -

2.1

CVSSv2

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of...

Openstack Grizzly -Openstack Havana -Openstack Folsom -

5.5

CVSSv2

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

Openstack Essex 2012.1 Openstack Folsom 2012.2 Openstack Diablo 2011.3

5.5

CVSSv2

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of...

Openstack Folsom 2012.2 Openstack Essex 2012.1

3.5

CVSSv2

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repea...

Openstack Compute 2012.2 Openstack Essex 2012.1 Openstack Folsom 2012.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook