PyPI/nova CVE-2014-2573: medium 6.5, EPSS 0.70%

OpenStack Nova VMWare driver leaks rescued images

Action: Upgrade nova to 12.0.0a0 or later.

pip install nova==12.0.0a0

Affected

Fixed versions

Sources

• osv: GHSA-jv34-xvjq-ppch
• https://nvd.nist.gov/vuln/detail/CVE-2014-2573
• https://github.com/openstack/nova/commit/b3cc3f62a60662e5bb82136c0cfa464592a6afe9
• https://github.com/openstack/nova/commit/efb66531bc37ee416778a70d46c657608ca767af
• https://bugs.launchpad.net/nova/+bug/1269418
• https://github.com/openstack/nova
• https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-113.yaml
• http://www.openwall.com/lists/oss-security/2014/03/21/1
• http://www.openwall.com/lists/oss-security/2014/03/21/2

CVE-2014-2573 · published 2022-05-17T04:48:26Z · modified 2024-11-26T18:36:56Z · JSON