CVE-2012-2101

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

PYSEC-2012-36

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

CVE-2012-2101

OpenStack Compute (Nova) in Folsom, 2012.1, and 2011.3, is vulnerable because it does not cap the number of security group rules. This allows remote authenticated users with certain permissions to trigger a denial of service by issuing a network request that creates a large number of iptables rul...

Ubuntu 11.10 / 12.04 LTS : nova vulnerability (USN-1466-1)

It was discovered that, when defining security groups in Nova using the EC2 or OS APIs, specifying the network protocol e.g. 'TCP' in the incorrect case would cause the security group to not be applied correctly. An attacker could use this to bypass Nova security group restrictions. Note that...

CVE-2012-2654

The 1 EC2 and 2 OS APIs in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restriction...

Fedora Update for openstack-nova FEDORA-2012-6365

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1438-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : nova vulnerability (USN-1438-1)

Dan Prince discovered that Nova did not enforce quotas for security groups and rules added to security groups. An authenticated user could exploit this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Ubuntu Update for nova USN-1438-1

Ubuntu Update for Linux kernel vulnerabilities USN-1438-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14381.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1438-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora Update for openstack-nova FEDORA-2012-6365

Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2012-6365 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

USN-1438-1: Nova vulnerability

Dan Prince discovered that Nova did not enforce quotas for security groups and rules added to security groups. An authenticated user could exploit this to cause a denial of service...

Fedora 17 : openstack-nova-2012.1-2.fc17 (2012-6273)

Sync up with Essex stable branch - Support more flexible guest image file injection - Enforce quota on security group rules CVE-2012-2101 - Provide startup scripts for the Essex VNC services - Provide a startup script for the separated metadata api service update to essex release Note that...

Fedora 16 : openstack-nova-2011.3.1-8.fc16 (2012-6365)

Fix undefined glancehost in getglanceclient - Implement quotas for security groups CVE-2012-2101 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[USN-1413-1] Nova vulnerability

========================================================================== Ubuntu Security Notice USN-1413-1 March 29, 2012 nova vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

Fedora 17 : openstack-nova-2012.1-0.10.rc1.fc17 (2012-4889)

CVE-2012-1585: Long server names grow nova-api log files significantly Avoid killing dnsmasq on network service shutdown. update to Essex RC1 which fixes 159 bugs detailed here: https://launchpad.net/nova/essex/essex-rc1 Features : - Support non blocking libvirt operations Bugs : - Suppress error...

Fedora Update for openstack-nova FEDORA-2012-5026

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for openstack-nova FEDORA-2012-5026

Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2012-5026 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora 16 : openstack-nova-2011.3.1-7.fc16 (2012-5026)

CVE-2012-1585: Long server names grow nova-api log files significantly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for openstack-nova FEDORA-2011-17111

Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2011-17111 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Ubuntu: Security Advisory (USN-1413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...