Skip to content
OpenAdvisories
Unscored RHSA-2016:0017 2 CVEs

Red Hat Security Advisory: openstack-nova security advisory

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-api 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-cells 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-cert 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-common 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-compute 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-conductor 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-console 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-doc 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-network 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-novncproxy 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-objectstore 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-scheduler 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-serialproxy 0:2014.1.5-16.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-nova 0:2014.1.5-16.el6ost

Vulnerabilities 2

  • Unscored —
    CVE-2015-7548

    OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instanc…

    nova nova Debian Ubuntu
  • Medium —
    CVE-2015-7713

    OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

    OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1269119
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1290511
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0017.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-7548
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7548
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7548
  • report
    https://access.redhat.com/security/cve/CVE-2015-7713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7713
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7713