Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2407-1
HistoryNov 11, 2014 - 12:00 a.m.

OpenStack Nova vulnerabilities

2014-11-1100:00:00
ubuntu.com
32

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • nova - OpenStack Compute cloud infrastructure

Details

Garth Mollett discovered that OpenStack Nova did not properly clean up an
instance when using rescue mode with the VMWare driver. A remove
authenticated user could exploit this to bypass intended quota limits. By
default, Ubuntu does not use the VMWare driver. (CVE-2014-3608)

Amrith Kumar discovered that OpenStack Nova did not properly sanitize log
message contents. Under certain circumstances, a local attacker with read
access to Nova log files could obtain access to sensitive information.
(CVE-2014-7230)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchpython-nova< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-ajax-console-proxy< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-api< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-api-ec2< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-api-metadata< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-api-os-compute< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-api-os-volume< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-baremetal< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-cells< 1:2014.1.3-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchnova-cert< 1:2014.1.3-0ubuntu1.1UNKNOWN
Rows per page:
1-10 of 291

Related

nessus 5
securityvulns 3
openvas 2
ubuntucve 2
cve 2
debiancve 2
cvelist 2
veracode 2
prion 2
nvd 2
redhat 3
osv 1
ubuntu 1
github 1
nessus
nessus
Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-2407-1)
2014-11-12 00:00:00
Ubuntu 14.04 LTS : OpenStack Cinder vulnerabilities (USN-2405-1)
2014-11-12 00:00:00
RHEL 7 : openstack-trove (RHSA-2014:1939)
2024-04-24 00:00:00
securityvulns
securityvulns
[USN-2407-1] OpenStack Nova vulnerabilities
2014-12-01 00:00:00
OpenStack multiple security vulnerabilities
2014-12-01 00:00:00
[USN-2405-1] OpenStack Cinder vulnerabilities
2014-12-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2407-1)
2014-11-12 00:00:00
Ubuntu: Security Advisory (USN-2405-1)
2014-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-7230
2014-10-08 00:00:00
CVE-2014-3608
2014-10-06 00:00:00
cve
cve
CVE-2014-7230
2014-10-08 19:55:04
CVE-2014-3608
2014-10-06 14:55:09
debiancve
debiancve
CVE-2014-7230
2014-10-08 19:55:04
CVE-2014-3608
2014-10-06 14:55:09
cvelist
cvelist
CVE-2014-7230
2014-10-08 19:00:00
CVE-2014-3608
2014-10-06 14:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:03:13
Denial Of Service (DoS)
2019-01-15 09:02:52
prion
prion
Design/Logic Flaw
2014-10-08 19:55:00
Design/Logic Flaw
2014-10-06 14:55:00
nvd
nvd
CVE-2014-7230
2014-10-08 19:55:04
CVE-2014-3608
2014-10-06 14:55:09
redhat
redhat
(RHSA-2014:1939) Low: openstack-trove security update
2014-12-02 16:42:21
(RHSA-2014:1782) Important: openstack-nova security, bug fix, and enhancement update
2014-11-03 08:21:32
(RHSA-2014:1781) Important: openstack-nova security, bug fix, and enhancement update
2014-11-03 08:20:52
osv
osv
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
2022-05-14 01:58:45
ubuntu
ubuntu
OpenStack Cinder vulnerabilities
2014-11-11 00:00:00
github
github
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
2022-05-14 01:58:45

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

JSON
Related for USN-2407-1
nessus5securityvulns3openvas2ubuntucve2cve2debiancve2cvelist2veracode2prion2nvd2redhat3osv1ubuntu1github1