Skip to content

openstack-nova-scheduler vulnerabilities (Red Hat)

55 vulnerabilities.

openstack-nova-scheduler Red HatOpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requestsCVE-2014-0167Fix available6.0 MediumApril 15, 2014
openstack-nova-scheduler Red HatOpenStack Nova DoS through ephemeral disk backing filesCVE-2013-6437Fix available4.0 MediumMarch 6, 2014
openstack-nova-scheduler Red HatOpenStack Nova Live migration can leak root disk into ephemeral storageCVE-2013-7130Fix available7.1 HighFebruary 6, 2014
openstack-nova-scheduler Red HatOpenStack Nova denial of service through compressed disk imagesCVE-2013-4463Fix available2.1 LowFebruary 6, 2014
openstack-nova-scheduler Red HatThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...CVE-2013-6491Fix available4.3 MediumFebruary 1, 2014
openstack-nova-scheduler Red HatOpenStack Nova live snapshots use an insecure local directoryCVE-2013-7048Fix available3.3 LowJanuary 23, 2014
openstack-nova-scheduler Red HatOpenStack Nova Router metadata queries are not restricted by tenantCVE-2013-6419Fix available5.0 MediumJanuary 7, 2014
openstack-nova-scheduler Red HatOpenStack Compute Nova Improper Access ControlCVE-2013-4497Fix available6.4 MediumNovember 5, 2013
openstack-nova-scheduler Red HatOpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...CVE-2013-4261Fix available3.5 LowOctober 29, 2013
openstack-nova-scheduler Red HatOpenStack Nova Denial of Service in network source security groupsCVE-2013-4185Fix available4.0 MediumOctober 29, 2013
openstack-nova-scheduler Red HatOpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attackCVE-2013-4179Fix available4.3 MediumSeptember 16, 2013
openstack-nova-scheduler Red HatOpenStack Compute (Nova) allows remote authenticated users to obtain sensitive informationCVE-2013-2256Fix available6.0 MediumSeptember 16, 2013
openstack-nova-scheduler Red HatXML Entity Expansion (XEE) in DjangoCVE-2013-1664Fix available5.0 MediumApril 3, 2013
openstack-nova-scheduler Red HatOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp functionCVE-2013-1838Fix available4.0 MediumMarch 22, 2013
openstack-nova-scheduler Red HatOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 HighMarch 22, 2013
openstack-nova-scheduler Red HatXML External Entity (XXE) in DjangoCVE-2013-1665Fix available5.0 MediumFebruary 27, 2013
openstack-nova-scheduler Red HatThe boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova...CVE-2013-0208Fix available6.5 MediumFebruary 13, 2013
openstack-nova-scheduler Red HatOpenstack nova: information leak in libvirt lvm-backed instancesCVE-2012-5625Fix available6.5 MediumDecember 26, 2012