CO
Product
Compute
12
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Compute to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-2255 | 5.9 | Nov 1 | HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates Affected: 2013.1 |
| CVE-2015-2687 | 4.7 | Aug 9 | OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for Affected: 2013.2; 2013.2.1; 2013.2.2; 2013.2.3; 2013.2.4; 2014.1; +10 more |
| CVE-2014-0134 | – | May 8 | The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false,… Affected: 2013.2; 2013.2.1; 2013.2.2 |
| CVE-2014-0167 | – | Apr 15 | The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1)… Affected: 2013.1; 2013.1.1; 2013.1.2; 2013.1.3; 2013.2; 2013.2.1; +2 more |
| CVE-2014-2573 | – | Mar 25 | The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota… Affected: 2013.2; 2013.2.1; 2013.2.2 |
| CVE-2013-7130 | – | Feb 6 | The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block… Affected: 2012.2; 2013.1; 2013.1.1; 2013.1.2; 2013.1.3 |
| CVE-2013-2030 | – | Dec 27 | keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to… Affected: 2013.1; 2013.1.1; 2013.1.2; 2013.1.3 |
| CVE-2013-4185 | – | Oct 29 | Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates,… Affected: 2013.1 before 2013.1.3; 2013.2 before 2013.2.3 |
| CVE-2013-4278 | – | Sep 16 | The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote… Affected: All versions, or not specified |
| CVE-2013-4179 | – | Sep 16 | The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource… Affected: 2013.1.3 |
| CVE-2012-3371 | – | Jul 17 | The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to… Affected: 2012.2 |
| CVE-2012-2654 | – | Jun 21 | The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created… Affected: 2012.2 |
Showing 12