Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0208
HistoryJan 29, 2013 - 12:00 a.m.

CVE-2013-0208

2013-01-2900:00:00
ubuntu.com
ubuntu.com
10

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.8%

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex,
when using nova-volumes, allows remote authenticated users to boot from
other users’ volumes via a volume id in the block_device_mapping parameter.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchnova< 2011.3-0ubuntu6.11UNKNOWN
ubuntu12.04noarchnova< 2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.1UNKNOWN
ubuntu12.10noarchnova< 2012.2.1+stable-20121212-a99a802e-0ubuntu1.1UNKNOWN

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.8%