The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nova | Jul 30, 2024 | Feb 13, 2013 |
| Suse | — | Upgrade openstack-nova-objectstoreUpgrade openstack-cinderUpgrade openstack-swift-docUpgrade openstack-nova-certUpgrade openstack-nova-docUpgrade openstack-swift-accountUpgrade python-cinderclient-testUpgrade openstack-swift-testUpgrade openstack-keystoneUpgrade openstack-cinder-docUpgrade python-keystoneclientUpgrade openstack-cinder-apiUpgrade openstack-cinder-volumeUpgrade python-novaUpgrade openstack-swift-objectUpgrade openstack-nova-testUpgrade openstack-dashboardUpgrade openstack-quantumUpgrade openstack-nova-novncproxyUpgrade python-cinderclient-docUpgrade python-glanceUpgrade openstack-novaUpgrade openstack-nova-volumeUpgrade openstack-cinder-schedulerUpgrade python-cinderclientUpgrade openstack-glance-docUpgrade openstack-dashboard-testUpgrade openstack-keystone-testUpgrade python-cinderUpgrade python-keystoneclient-testUpgrade openstack-nova-computeUpgrade python-django_openstack_authUpgrade openstack-keystone-docUpgrade openstack-cinder-testUpgrade openstack-quickstartUpgrade openstack-nova-apiUpgrade openstack-quantum-docUpgrade openstack-swift-containerUpgrade python-keystoneclient-docUpgrade python-quantumUpgrade openstack-nova-schedulerUpgrade python-horizonUpgrade python-swiftUpgrade openstack-swift-proxyUpgrade openstack-nova-vncproxyUpgrade python-keystoneUpgrade openstack-glance-testUpgrade openstack-glanceUpgrade openstack-nova-networkUpgrade openstack-quantum-testUpgrade openstack-swift | Dec 12, 2013 | Feb 13, 2013 |
| Ubuntu | — | Upgrade nova-volumeUpgrade python-nova | Nov 8, 2024 | Feb 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub