Skip to content
OpenAdvisories
Medium USN-4104-1 1 CVE

nova vulnerability

Published Aug 19, 2019 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Donny Davis discovered that the Nova Compute service could return
configuration or other information in response to a failed API
request in some situations. A remote attacker could use this to expose
sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS nova 2:13.1.4-0ubuntu4.5
Ubuntu · 18.04 LTS 18.04:LTS nova 2:17.0.10-0ubuntu2.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-14433

    OpenStack Nova Server Resource Faults Leak External Exception Details

    An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in t…

    nova nova nova Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2019-14433