Lucene search
RedHatRHSA-2023:1016HistoryFeb 28, 2023 - 3:40 p.m.
(RHSA-2023:1016) Important: Red Hat OpenStack Platform 17.0 (openstack-cinder) security update
2023-02-2815:40:50
access.redhat.com
10
red hat openstack platform
openstack-cinder
arbitrary file access
0.003 Low
EPSS
Percentile
66.1%
Cinder is the replacement of nova-volume in Folsom and beyond, used for
block storage.
Security Fix(es):
- Arbitrary file access through custom VMDK flat descriptor
(CVE-2022-47951)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | noarch | python3-cinder-common | < 18.2.1-0.20230202190311.1776695.el9ost | python3-cinder-common-18.2.1-0.20230202190311.1776695.el9ost.noarch.rpm |
| RedHat | 9 | noarch | openstack-cinder | < 18.2.1-0.20230202190311.1776695.el9ost | openstack-cinder-18.2.1-0.20230202190311.1776695.el9ost.noarch.rpm |
| RedHat | 9 | noarch | python3-cinder | < 18.2.1-0.20230202190311.1776695.el9ost | python3-cinder-18.2.1-0.20230202190311.1776695.el9ost.noarch.rpm |
Related
debian
debian
[SECURITY] [DLA 3301-1] cinder security update
2023-01-30 22:10:12
[SECURITY] [DLA 3300-1] glance security update
2023-01-30 22:04:57
[SECURITY] [DLA 3302-1] nova security update
2023-01-30 22:15:06
nessus
nessus
Debian DSA-5337-1 : nova - security update
2023-02-02 00:00:00
RHEL 7 / 8 : Synopsis: Red Hat OpenStack Platform (openstack-glance) (RHSA-2023:1280)
2024-04-28 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Nova vulnerability (USN-5835-3)
2023-01-31 00:00:00
redhat
redhat
osv
osv
cinder vulnerability
2023-01-31 13:11:52
cinder - security update
2023-02-01 00:00:00
cinder vulnerability
2023-02-09 12:26:36
openvas
openvas
Ubuntu: Security Advisory (USN-5835-3)
2023-02-01 00:00:00
Debian: Security Advisory (DLA-3302-1)
2023-01-31 00:00:00
Ubuntu: Security Advisory (USN-5835-5)
2023-02-10 00:00:00
ubuntucve
ubuntucve
CVE-2022-47951
2023-01-27 00:00:00
ubuntu
ubuntu
Cinder vulnerability
2023-02-09 00:00:00
Cinder vulnerability
2023-01-31 00:00:00
Nova vulnerability
2023-02-09 00:00:00
nvd
nvd
CVE-2022-47951
2023-01-26 22:15:25
cve
cve
CVE-2022-47951
2023-01-26 22:15:25
cvelist
cvelist
CVE-2022-47951
2023-01-26 00:00:00
veracode
veracode
Information Disclosure
2023-02-03 17:08:10
github
github
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
2023-01-27 00:30:19
redhatcve
redhatcve
CVE-2022-47951
2023-01-25 05:37:07
freebsd
freebsd
py-cinder -- unauthorized data access
2023-01-27 00:00:00
prion
prion
Design/Logic Flaw
2023-01-26 22:15:00
debiancve
debiancve
CVE-2022-47951
2023-01-26 22:15:25