Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2016-7498

openstack-nova: May fail to delete images in resize state regression

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack
Products
Compute \(nova\)
CVE-2013-1664

bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Folsom Compute \(nova\) Essex Compute \(nova\) Folsom and 4 more