Skip to content
OpenAdvisories
Unscored RHSA-2014:0112 2 CVEs

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-api 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-cells 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-cert 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-common 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-compute 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-conductor 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-console 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-doc 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-network 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-objectstore 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-scheduler 0:2013.1.4-4.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-nova 0:2013.1.4-4.el6ost

Vulnerabilities 2

  • Low —
    CVE-2013-4463

    OpenStack Nova denial of service through compressed disk images

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to…

    nova nova Debian PyPI
  • Unscored —
    CVE-2013-6491

    The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when …

    nova Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=996766
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1014948
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1044562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1050213
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1059504
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0112.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4463
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4463
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4463
  • report
    https://access.redhat.com/security/cve/CVE-2013-6491
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6491
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6491