Openstack Folsom vulnerabilities

• openstack folsom, grizzly, havana +2 more OpenStack Nova denial of service through compressed disk images CVE-2013-4463 Fix available 2.1 LowFebruary 6, 2014
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Nova uses insecure keystone middleware tmpdir by default CVE-2013-2030 Fix available 2.1 LowDecember 27, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute Nova Improper Access Control CVE-2013-4497 Fix available 6.4 MediumNovember 5, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2013-4469 Fix available 1.9 LowNovember 2, 2013
• openstack folsom, grizzly, redhat openstack +2 more OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend... CVE-2013-4261 Fix available 3.5 LowOctober 29, 2013
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4155 Fix available 4.0 MediumAugust 12, 2013
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Swift Unchecked user input in XML responses CVE-2013-2161 Fix available 7.5 HighAugust 12, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-2096 Fix available 2.1 LowJuly 9, 2013
• openstack cinder folsom, folsom, grizzly +3 more +5 more XML Entity Expansion (XEE) in Django CVE-2013-1664 Fix available 5.0 MediumApril 3, 2013
• openstack folsom, canonical ubuntu linux +1 more OpenStack Keystone Improper Authentication vulnerability CVE-2013-1865 Fix available 6.8 MediumMarch 22, 2013
• openstack essex, folsom, grizzly +1 more +3 more OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function CVE-2013-1838 Fix available 4.0 MediumMarch 22, 2013
• openstack essex, folsom, grizzly +6 more +8 more Openstack nova: vnc proxy can connect to the wrong vm CVE-2013-0335 Fix available 7.6 HighMarch 22, 2013
• openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 more Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files. CVE-2013-0266 5.5 MediumMarch 8, 2013
• openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 more Packstack: packstack: arbitrary file overwrite via symlink attack CVE-2013-0261 8.8 HighMarch 8, 2013
• openstack folsom, keystone essex +1 more XML External Entity (XXE) in Django CVE-2013-1665 Fix available 5.0 MediumFebruary 27, 2013
• openstack essex, folsom, canonical ubuntu linux +2 more The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova... CVE-2013-0208 Fix available 6.5 MediumFebruary 13, 2013
• openstack folsom, grizzly, red hat openstack folsom for rhel 6 +3 more +5 more Openstack nova: information leak in libvirt lvm-backed instances CVE-2012-5625 Fix available 6.5 MediumDecember 26, 2012
• openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 more Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling CVE-2012-5571 Fix available 5.4 MediumDecember 18, 2012
• openstack folsom OpenStack Keystone Insufficient token expiration CVE-2012-5563 Fix available 4.0 MediumDecember 18, 2012
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-5482 Fix available 5.5 MediumNovember 11, 2012
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-4573 Fix available 5.5 MediumNovember 11, 2012
• openstack folsom, nova +1 more Arbitrary file overwrite in OpenStack Nova CVE-2012-3447 Fix available 4.9 MediumAugust 20, 2012
• openstack diablo, essex, folsom +2 more OpenStack Nova Arbitrary file injection/corruption through directory traversal issues CVE-2012-3361 Fix available 5.5 MediumJuly 22, 2012
• openstack essex, folsom +1 more OpenStack Nova Directory traversal vulnerability CVE-2012-3360 Fix available 5.5 MediumJuly 22, 2012
• openstack compute, essex, folsom +2 more OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-3371 Fix available 3.5 LowJuly 17, 2012