USN-2407-1

Dashboard / Vulnerabilities / USN-2407-1

USN-2407-1

Summary: nova vulnerabilities

Details: Garth Mollett discovered that OpenStack Nova did not properly clean up an instance when using rescue mode with the VMWare driver. A remove authenticated user could exploit this to bypass intended quota limits. By default, Ubuntu does not use the VMWare driver. (CVE-2014-3608) Amrith Kumar discovered that OpenStack Nova did not properly sanitize log message contents. Under certain circumstances, a local attacker with read access to Nova log files could obtain access to sensitive information. (CVE-2014-7230)

References: https://ubuntu.com/security/notices/USN-2407-1, https://ubuntu.com/security/CVE-2014-3608, https://ubuntu.com/security/CVE-2014-7230