Lucene search
UbuntuUSN-6911-1HistoryJul 23, 2024 - 12:00 a.m.
Nova vulnerability
2024-07-2300:00:00
ubuntu.com
16
nova
ubuntu
vulnerability
openstack
compute
cloud
infrastructure
raw format
images
authenticated user
server
sensitive information
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
29.9%
Releases
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- nova - OpenStack Compute cloud infrastructure
Details
Arnaud Morin discovered that Nova incorrectly handled certain raw format
images. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | nova-common | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-ajax-console-proxy | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-api | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-api-metadata | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-api-os-compute | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-api-os-volume | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-cells | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-compute | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-compute-ironic | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
| Ubuntu | 24.04 | noarch | nova-compute-kvm | < 3:29.0.1-0ubuntu1.4 | UNKNOWN |
References
Related
redhat
redhat
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2.6 (RHSA-2024:5097)
2024-08-07 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Nova vulnerability (USN-6911-1)
2024-07-23 00:00:00
RHEL 9 : Red Hat OpenStack Platform 17.1.3 (RHSA-2024:5083)
2024-08-07 00:00:00
osv
osv
nova vulnerability
2024-07-23 16:41:30
nova - security update
2024-09-05 00:00:00
CVE-2024-40767
2024-07-23 15:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6911-1)
2024-07-24 00:00:00
redhatcve
redhatcve
CVE-2024-40767
2024-07-23 18:31:27
debiancve
debiancve
CVE-2024-40767
2024-07-24 05:15:12
vulnrichment
vulnrichment
CVE-2024-40767
2024-07-24 00:00:00
github
github
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
2024-07-24 06:31:10
nvd
nvd
CVE-2024-40767
2024-07-24 05:15:12
cvelist
cvelist
CVE-2024-40767
2024-07-24 00:00:00
ubuntucve
ubuntucve
CVE-2024-40767
2024-07-23 00:00:00
cve
cve
CVE-2024-40767
2024-07-24 05:15:12
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
29.9%
Related for USN-6911-1