Skip to content
OpenAdvisories

Archive

2 November 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    OpenStack Identity Keystone Privilege Escalation vulnerability

    The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

  • Low —

    OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image wi…