Skip to content
OpenAdvisories
High USN-2247-1 6 CVEs

nova vulnerabilities

Published Jun 17, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Nova
did not properly set up its sudo configuration. If a different flaw was
found in OpenStack Nova, this vulnerability could be used to escalate
privileges. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS.
(CVE-2013-1068)

Bernhard M. Wiedemann and Pedraig Brady discovered that OpenStack Nova did
not properly verify the virtual size of a QCOW2 images. A remote
authenticated attacker could exploit this to create a denial of service via
disk consumption. This issue did not affect Ubuntu 14.04 LTS.
(CVE-2013-4463, CVE-2013-4469)

JuanFra Rodriguez Cardoso discovered that OpenStack Nova did not enforce
SSL connections when Nova was configured to use QPid and qpid_protocol is
set to 'ssl'. If a remote attacker were able to perform a machine-in-the-middle
attack, this flaw could be exploited to view sensitive information. Ubuntu
does not use QPid with Nova by default. This issue did not affect Ubuntu
14.04 LTS. (CVE-2013-6491)

Loganathan Parthipan discovered that OpenStack Nova did not properly create
expected files during KVM live block migration. A remote authenticated
attacker could exploit this to obtain root disk snapshot contents via
ephemeral storage. This issue did not affect Ubuntu 14.04 LTS.
(CVE-2013-7130)

Stanislaw Pitucha discovered that OpenStack Nova did not enforce the image
format when rescuing an instance. A remote authenticated attacker could
exploit this to read host files. In the default installation, attackers
would be isolated by the libvirt guest AppArmor profile. This issue only
affected Ubuntu 13.10. (CVE-2014-0134)

Mark Heckmann discovered that OpenStack Nova did not enforce RBAC policy
when adding security group rules via the EC2 API. A remote authenticated
user could exploit this to gain unintended access to this API. This issue
only affected Ubuntu 13.10. (CVE-2014-0167)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nova 1:2014.1-0ubuntu1.2

Vulnerabilities 6

  • High 7.5
    CVE-2013-7130

    OpenStack Nova Live migration can leak root disk into ephemeral storage

    The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obt…

    nova nova Debian PyPI
  • Unscored —
    CVE-2013-1068

    The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubun…

    nova nova cinder cinder Debian Ubuntu
  • Low —
    CVE-2013-4463

    OpenStack Nova denial of service through compressed disk images

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to…

    nova nova Debian PyPI
  • Low —
    CVE-2013-4469

    OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image wi…

    nova nova Debian PyPI
  • Unscored —
    CVE-2013-6491

    The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when …

    nova Debian
  • Medium —
    CVE-2014-0167

    OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests

    The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py…

    nova nova Debian PyPI

References

  • report
    https://ubuntu.com/security/CVE-2013-1068
  • report
    https://ubuntu.com/security/CVE-2013-4463
  • report
    https://ubuntu.com/security/CVE-2013-4469
  • report
    https://ubuntu.com/security/CVE-2013-6491
  • report
    https://ubuntu.com/security/CVE-2013-7130
  • report
    https://ubuntu.com/security/CVE-2014-0134
  • report
    https://ubuntu.com/security/CVE-2014-0167