Skip to content
Openstack Nova vulnerabilities
-
openstack nova
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
CVE-2026-46448
Fix available
5.4 Medium
-
openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 more
OpenStack Nova calls qemu-img without format restrictions for resize
CVE-2026-24708
Fix available
8.2 High
-
openstack nova
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
CVE-2024-40767
Fix available
6.5 Medium
-
openstack cinder, glance, nova +2 more
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
CVE-2024-32498
Fix available
6.5 Medium
-
openstack cinder, glance, nova +1 more +3 more
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
CVE-2022-47951
Fix available
5.7 Medium
-
openstack nova
OpenStack Nova Changing vnic_type breaks compute service restart
CVE-2022-37394
Fix available
3.3 Low
-
openstack nova, openstack-nova, redhat openstack platform +2 more
Open Redirect in CPython that affects users of OpenStack Nova
CVE-2021-3654
Fix available
EPSS 26.8%
6.1 Medium
-
openstack nova
OpenStack Nova Live migration fails to update persistent domain XML
CVE-2020-17376
Fix available
8.3 High
-
openstack nova
OpenStack Nova can leak consoleauth token into log files
CVE-2015-9543
Fix available
3.3 Low
-
openstack nova, debian linux, openstack-nova +2 more
OpenStack nova base images permissions are world readable
CVE-2013-0326
5.5 Medium
-
nova
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
CVE-2011-4076
Fix available
5.9 Medium
-
openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 more
OpenStack Nova Server Resource Faults Leak External Exception Details
CVE-2019-14433
Fix available
6.5 Medium
-
openstack nova
qcow format could expose host filesystem information
CVE-2011-3147
Fix available
2.8 Low
-
openstack nova, redhat openstack +1 more
OpenStack Nova Denial of service attack on the compute host
CVE-2017-18191
Fix available
7.5 High
-
openstack nova
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
CVE-2017-17051
Fix available
8.6 High
-
openstack nova
OpenStack Nova Filter Scheduler Bypass
CVE-2017-16239
Fix available
6.5 Medium
-
openstack nova
OpenStack Nova logs sensitive context from notification exceptions
CVE-2017-7214
Fix available
9.8 Critical
-
openstack nova-lxd, canonical ubuntu linux +1 more
OpenStack Nova-LXD bypass security restrictions
CVE-2017-5936
Fix available
7.5 High
-
openstack cinder, glance, nova +2 more
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
CVE-2015-5162
Fix available
7.5 High
-
openstack compute \(nova\)
OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which...
CVE-2016-7498
Fix available
6.5 Medium
-
openstack nova
OpenStack Nova host data access through resize/migration
CVE-2016-2140
Fix available
5.3 Medium
-
openstack nova
OpenStack Nova Potential Xen connection password leak via StorageError
CVE-2015-8749
Fix available
5.9 Medium
-
openstack nova
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using...
CVE-2015-7548
Fix available
3.5 Low
-
openstack nova
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
CVE-2015-7713
Fix available
5.0 Medium
-
openstack nova
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
CVE-2015-3280
Fix available
6.8 Medium
-
openstack nova
OpenStack Nova instance migration process does not stop when instance is deleted
CVE-2015-3241
Fix available
6.8 Medium
-
openstack nova
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
CVE-2015-0259
Fix available
5.1 Medium
-
openstack nova, redhat openstack +1 more
OpenStack Nova VMware instance leak potentially leading to compute DoS
CVE-2014-8333
Fix available
4.0 Medium
-
openstack nova, redhat openstack +1 more
OpenStack Compute (Nova) Denial of Service vulnerability
CVE-2014-3708
Fix available
4.0 Medium
-
openstack nova
Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before...
CVE-2014-8750
Fix available
6.5 Medium
-
openstack cinder, nova, trove +1 more +3 more
OpenStack Oslo utility sensitive information exposure via log files
CVE-2014-7231
Fix available
2.1 Low
-
openstack cinder, nova, trove +2 more +4 more
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...
CVE-2014-7230
Fix available
2.1 Low
-
openstack nova
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
CVE-2014-3608
Fix available
2.7 Low
-
openstack nova
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
CVE-2014-3517
Fix available
4.3 Medium
-
openstack nova
OpenStack Nova DoS through ephemeral disk backing files
CVE-2013-6437
Fix available
4.0 Medium
-
openstack nova
OpenStack Nova live snapshots use an insecure local directory
CVE-2013-7048
Fix available
3.3 Low
-
openstack nova
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
CVE-2013-2256
Fix available
6.0 Medium
-
openstack cinder folsom, folsom, grizzly +3 more +5 more
XML Entity Expansion (XEE) in Django
CVE-2013-1664
Fix available
5.0 Medium
-
openstack folsom, nova +1 more
Arbitrary file overwrite in OpenStack Nova
CVE-2012-3447
Fix available
4.9 Medium
-
openstack nova
OpenStack Nova Long server names grow nova-api log files significantly
CVE-2012-1585
Fix available
4.0 Medium
-
openstack nova
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
CVE-2012-2101
Fix available
3.5 Low
-
openstack essex, nova +1 more
Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass...
CVE-2012-0030
Fix available
4.9 Medium
-
openstack nova
OpenStack Nova Multiple directory traversal vulnerabilities
CVE-2011-4596
Fix available
6.0 Medium