PyPI/cinder CVE-2013-4183: medium 6.2, EPSS 0.41%

OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots

Action: Upgrade cinder to 7.0.0a0 or later.

pip install cinder==7.0.0a0

Affected

Fixed versions

Sources

• osv: GHSA-q3rw-wcj6-8cjf
• https://nvd.nist.gov/vuln/detail/CVE-2013-4183
• https://github.com/openstack/cinder/commit/0ee31073c5cb432a9cdd2648e99aa802b0ed0a17
• https://github.com/openstack/cinder/commit/68c597e26b5659a036a7a937622e539bac102308
• https://bugs.launchpad.net/cinder/+bug/1198185
• https://github.com/openstack/cinder
• https://github.com/pypa/advisory-database/tree/main/vulns/cinder/PYSEC-2013-35.yaml
• https://rhn.redhat.com/errata/RHSA-2013-1198.html
• https://www.ubuntu.com/usn/USN-2005-1

CVE-2013-4183 · published 2022-05-17T04:58:58Z · modified 2024-11-26T16:09:05Z · JSON