CVE-2013-0208

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to … (CVE-2013-0208)

Description

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.

Source: CVELISTV5 NVD

Metrics

Severity

none

50.21

—

no public PoC known

—

—

—

83.8 %

Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).

EPSS score

2.5 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2013-02-13 16:00 UTC

CWE

—

Affected operating systems

linux
canonical / ubuntu_linux11.10
linux
canonical / ubuntu_linux12.04
linux
canonical / ubuntu_linux12.10

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

openstack
essex
openstack
folsom

References & sources

IDCVE-2013-0208