OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-0335 · ADVISORY
• bugs.launchpad.net/nova/+bug/1125378 · WEB
• openstack/nova · PACKAGE
• pypa/advisory-database · WEB
• review.openstack.org · WEB
• review.openstack.org · WEB
• review.openstack.org · WEB
• openstack/nova commit 05a3374 · WEB
• openstack/nova commit 3b0f4cf · WEB
• openstack/nova commit 48e81f1 · WEB
• openstack/nova commit ad94a90 · WEB
• openstack/nova commit e98928c · WEB
• rhn.redhat.com/errata/RHSA-2013-0709.html · WEB
• openwall.com/lists/oss-security/2013/02/26/7 · WEB
• ubuntu.com/usn/USN-1771-1 · WEB
• secunia.com/advisories/52337 · Vendor Advisory
• secunia.com/advisories/52728 · Vendor Advisory
• osvdb.org/90657
• access.redhat.com/errata/RHSA-2013:0709
• access.redhat.com/security/cve/CVE-2013-0335
• GitHub Advisory GHSA-qfp8-hfqx-c79c
• review.openstack.org
• review.openstack.org

nova のその他の脆弱性

• CVE-2026-46448高 8.5In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
• CVE-2026-24708高 8.2An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a roo…
• CVE-2024-40767中 6.5In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 im…
• CVE-2024-32498中 6.5An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur vi…
• CVE-2022-47951中 5.7An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.…