Openstack Compute vulnerabilities

• openstack compute, keystone, redhat openstack +1 more +3 more OpenStack Keystone and other components vulnerable to Improper Certificate Validation CVE-2013-2255 Fix available 5.9 MediumNovember 1, 2019
• openstack compute OpenStack Compute (Nova) Improper Access Control CVE-2015-2687 Fix available 4.7 MediumAugust 9, 2017
• openstack compute \(nova\) OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which... CVE-2016-7498 Fix available 6.5 MediumSeptember 27, 2016
• openstack compute OpenStack Nova host data leak to vm instance in rescue mode CVE-2014-0134 Fix available 3.5 LowMay 8, 2014
• openstack compute, icehouse +1 more OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests CVE-2014-0167 Fix available 6.0 MediumApril 15, 2014
• openstack compute OpenStack Nova VMWare driver leaks rescued images CVE-2014-2573 Fix available 2.3 LowMarch 25, 2014
• openstack compute, grizzly, havana +1 more +3 more OpenStack Nova Live migration can leak root disk into ephemeral storage CVE-2013-7130 Fix available 7.1 HighFebruary 6, 2014
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Nova uses insecure keystone middleware tmpdir by default CVE-2013-2030 Fix available 2.1 LowDecember 27, 2013
• openstack compute, redhat openstack +1 more OpenStack Nova Denial of Service in network source security groups CVE-2013-4185 Fix available 4.0 MediumOctober 29, 2013
• openstack compute OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors CVE-2013-4278 Fix available 3.5 LowSeptember 16, 2013
• openstack compute, havana +1 more OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4179 Fix available 4.3 MediumSeptember 16, 2013
• openstack cinder folsom, folsom, grizzly +3 more +5 more XML Entity Expansion (XEE) in Django CVE-2013-1664 Fix available 5.0 MediumApril 3, 2013
• openstack compute, essex, folsom +2 more OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-3371 Fix available 3.5 LowJuly 17, 2012
• openstack compute, diablo, essex +2 more OpenStack Compute (Nova) Improper Input Validation CVE-2012-2654 Fix available 4.3 MediumJune 21, 2012