Lucene search

K
redhatRedHatRHSA-2023:1278
HistoryMar 15, 2023 - 7:44 p.m.

(RHSA-2023:1278) Important: Red Hat OpenStack Platform (openstack-nova) security update

2023-03-1519:44:47
access.redhat.com
93
red hat openstack platform
openstack-nova
security update
virtual machines
cloud computing platform
hypervisor agnostic
arbitrary file access
cve-2022-47951
cvss score

0.003 Low

EPSS

Percentile

66.1%

OpenStack Compute (codename Nova) is open source software designed
to provision and manage large networks of virtual machines, creating a
redundant and scalable cloud computing platform. It gives you the software,
control panels, and APIs required to orchestrate a cloud, including running
instances, managing networks, and controlling access through users and
projects.OpenStack Compute strives to be both hardware and hypervisor
agnostic, currently supporting a variety of standard hardware
configurations and seven major hypervisors.

Security Fix(es):

  • Arbitrary file access through custom VMDK flat descriptor
    (CVE-2022-47951)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.