{"id":"CVE-2019-14433","aliases":["DEBIAN-CVE-2019-14433","DLA-3109-1","EUVD-2019-0096","GHSA-pg64-r7rr-phv8","PYSEC-2019-191","RHSA-2019:2622","RHSA-2019:2631","RHSA-2019:2652","UBUNTU-CVE-2019-14433","USN-4104-1"],"status":"published","title":"OpenStack Nova Server Resource Faults Leak External Exception Details","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01981,"percentile":0.80695,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-209"],"published":"2019-08-06T15:00:00Z","modified":"2026-10-24T10:30:35Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["17.0.12","18.2.2","19.0.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2:19.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2:19.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2:19.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"nova","fixed_in":["2:18.1.0-6+deb10u1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-api","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-cells","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-common","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-compute","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-conductor","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-console","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-migration","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-network","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-novncproxy","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-placement-api","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-scheduler","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-serialproxy","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-nova","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-nova-tests","fixed_in":["1:17.0.10-6.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-api","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-cells","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-cert","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-common","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-compute","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-conductor","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-console","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-migration","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-network","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-novncproxy","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-placement-api","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-scheduler","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-serialproxy","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"python-nova","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"python-nova-tests","fixed_in":["1:14.1.0-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-api","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-cells","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-common","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-compute","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-conductor","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-console","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-migration","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-network","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-novncproxy","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-placement-api","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-scheduler","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-serialproxy","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-nova","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-nova-tests","fixed_in":["1:18.2.1-0.20190509150817.8e130e2.el7ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nova","fixed_in":["2:13.1.4-0ubuntu4.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nova","fixed_in":["2:17.0.10-0ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.12"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0.0"},{"fixed":"18.2.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0"},{"fixed":"19.0.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.1.0-6+deb10u1"}]}],"versions":["2:18.1.0-6"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.12"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.7","17.0.8","17.0.9"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0.0"},{"fixed":"18.2.2"}]}],"versions":["18.0.2","18.0.3","18.1.0","18.2.0","18.2.1"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0"},{"fixed":"19.0.2"}]}],"versions":["19.0.0","19.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0"},{"fixed":"19.0.2"},{"introduced":"0"},{"fixed":"17.0.12"},{"introduced":"18.0.0"},{"fixed":"18.2.2"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.7","17.0.8","17.0.9","18.0.2","18.0.3","18.1.0","18.2.0","18.2.1","19.0.0","19.0.1"]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-placement-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-nova-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.10-6.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-placement-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"python-nova-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:14.1.0-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-placement-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-nova-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20190509150817.8e130e2.el7ost"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.1.4-0ubuntu4.5"}]}],"versions":["2:12.0.0-0ubuntu2","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc3-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.0-0ubuntu2","2:13.0.0-0ubuntu5","2:13.1.0-0ubuntu1","2:13.1.1-0ubuntu1","2:13.1.1-0ubuntu1.1","2:13.1.2-0ubuntu2","2:13.1.3-0ubuntu1","2:13.1.3-0ubuntu2","2:13.1.4-0ubuntu1","2:13.1.4-0ubuntu2","2:13.1.4-0ubuntu3","2:13.1.4-0ubuntu4.1","2:13.1.4-0ubuntu4.2","2:13.1.4-0ubuntu4.3","2:13.1.4-0ubuntu4.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.10-0ubuntu2.1"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.1.4-0ubuntu4.5"}]}],"versions":["2:12.0.0-0ubuntu2","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc3-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.0-0ubuntu2","2:13.0.0-0ubuntu5","2:13.1.0-0ubuntu1","2:13.1.1-0ubuntu1","2:13.1.1-0ubuntu1.1","2:13.1.2-0ubuntu2","2:13.1.3-0ubuntu1","2:13.1.3-0ubuntu2","2:13.1.4-0ubuntu1","2:13.1.4-0ubuntu2","2:13.1.4-0ubuntu3","2:13.1.4-0ubuntu4.1","2:13.1.4-0ubuntu4.2","2:13.1.4-0ubuntu4.3","2:13.1.4-0ubuntu4.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.10-0ubuntu2.1"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"openstack","product":"nova"},{"vendor":"redhat","product":"openstack"}],"references":[{"url":"https://launchpad.net/bugs/1837877","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.openstack.org/ossa/OSSA-2019-003.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2019/08/06/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/4104-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2631","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2622","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2652","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00018.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14433","tags":["advisory"]},{"url":"https://github.com/openstack/nova/commit/298b337a16c0d10916b4431c436d19b3d6f5360e","tags":["web"]},{"url":"https://usn.ubuntu.com/4104-1","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2019-191.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-pg64-r7rr-phv8","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14433","tags":["advisory"]},{"url":"https://github.com/openstack/nova","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735522","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2622.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14433","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1697517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721754","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2631.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730728","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2652.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4104-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-14433","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T18:21:04Z","modified":"2024-08-05T00:19:41.228Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-0096","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T18:21:04Z","modified":"2024-08-05T00:19:41Z","updated_at":"2026-11-03T02:40:39.508511Z"}],"ghsa":[{"id":"GHSA-pg64-r7rr-phv8","title":"OpenStack Nova Server Resource Faults Leak External Exception Details","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2022-05-24T16:53:02Z","modified":"2024-10-07T15:10:37Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-209"],"updated_at":"2026-11-02T14:38:08.742903Z"}],"nvd":[{"id":"CVE-2019-14433","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T19:15:11.577Z","modified":"2026-06-17T02:18:25.457Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:05:22.878504Z"}],"osv":[{"id":"CVE-2019-14433","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T19:15:11.577Z","modified":"2026-10-24T10:30:35.909619773Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-14433","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T19:15:11.577Z","modified":"2026-09-21T07:01:08.144525042Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"GHSA-pg64-r7rr-phv8","title":"OpenStack Nova Server Resource Faults Leak External Exception Details","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2022-05-24T16:53:02Z","modified":"2024-10-07T15:23:00.957365Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-200","CWE-209"],"updated_at":"2026-11-02T15:46:53.244788Z"},{"id":"RHSA-2019:2622","title":"Red Hat Security Advisory: openstack-nova security and bug fix update","status":"published","published":"2024-09-13T16:12:00Z","modified":"2026-08-01T10:02:57Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2631","title":"Red Hat Security Advisory: openstack-nova security and bug fix update","status":"published","published":"2024-09-13T16:12:39Z","modified":"2026-08-01T10:02:58Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2652","title":"Red Hat Security Advisory: openstack-nova security and bug fix update","status":"published","published":"2024-09-13T16:11:57Z","modified":"2026-08-01T10:02:58Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-14433","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-06T15:00:00Z","modified":"2026-02-04T02:31:49.705655Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-3109-1","title":"nova - security update","status":"published","published":"2022-09-15T00:00:00Z","modified":"2026-03-09T01:23:22.212314Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"PYSEC-2019-191","description":"An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.","status":"published","published":"2019-08-09T19:15:00Z","modified":"2026-06-10T17:02:26.17025686Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"USN-4104-1","title":"nova vulnerability","description":"Donny Davis discovered that the Nova Compute service could return\nconfiguration or other information in response to a failed API\nrequest in some situations. A remote attacker could use this to expose\nsensitive information.\n","status":"published","published":"2019-08-19T23:17:21Z","modified":"2026-02-10T04:41:36Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}