Nova vulnerability

2012-03-2900:00:00

ubuntu.com

6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.6%

JSON

Releases

Ubuntu 11.10

Packages

nova - OpenStack Compute cloud infrastructure

Details

Dan Prince discovered that Nova did not properly perform input validation on
the length of server names. An authenticated attacker could issue requests
using long server names to exhaust the storage resources containing the Nova
API log file.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchpython-nova< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-ajax-console-proxy< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-api< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-common< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-compute< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-compute-kvm< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-compute-lxc< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-compute-uml< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-compute-xen< 2011.3-0ubuntu6.5UNKNOWN
Ubuntu11.10noarchnova-doc< 2011.3-0ubuntu6.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	python-nova	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-ajax-console-proxy	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-api	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-common	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-compute	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-compute-kvm	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-compute-lxc	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-compute-uml	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-compute-xen	< 2011.3-0ubuntu6.5	UNKNOWN
Ubuntu	11.10	noarch	nova-doc	< 2011.3-0ubuntu6.5	UNKNOWN