NO
Product
Nova
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 10Low 3
Watch
Add Nova to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40767 | 6.5 | Jul 24 | In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK… Affected: before 27.4.1; 28.0.0 before 28.2.1; 29.0.0 before 29.1.1 |
| CVE-2024-32498 | 6.5 | Jul 5 | An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3 Affected: before 27.3.1; 28.0.0 before 28.1.1; 29.0.0 before 29.0.3 |
| CVE-2019-14433 | 6.5 | Aug 9 | An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2 Affected: before 17.0.12; 18.0.0 before 18.2.2; 19.0.0 before 19.0.2 |
| CVE-2017-16239 | 6.5 | Nov 14 | In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler… Affected: through 14.0.9; 15.0.0; 15.0.1; 15.0.2; 15.0.3; 15.0.4; +6 more |
| CVE-2021-3654 | 6.1 | Mar 2 | A vulnerability was found in openstack-nova's console proxy, noVNC Affected: before 21.2.3; 22.0.0 before 22.2.3; 23.0.0 before 23.0.3 |
| CVE-2011-4076 | 5.9 | Nov 26 | OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password) Affected: 2010.1 before 2012.1 |
| CVE-2015-8749 | 5.9 | Jan 15 | The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the… Affected: 12.0.0 before 12.0.1; 2015.1.0 before 2015.1.3 |
| CVE-2022-47951 | 5.7 | Jan 26 | An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x… Affected: before 24.1.2; 25.0.0 before 25.0.2 |
| CVE-2013-0326 | 5.5 | Dec 5 | OpenStack nova base images permissions are world readable Affected: All versions, or not specified |
| CVE-2016-2140 | 5.3 | Apr 12 | The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote… Affected: 12.0.0 before 12.0.3; 2015.1.0 before 2015.1.4 |
Showing 10