{"action":"Upgrade cinder to 7.0.0a0 or later.","affected":[{"fixed":"7.0.0a0","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2013-4183"],"ecosystem":"PyPI","epss":0.00406,"exploited":false,"fixed_versions":["7.0.0a0"],"ghsa_id":"GHSA-q3rw-wcj6-8cjf","id":"tcs_01M5KFV70Y91BR4PM9V2N3PYM4","modified_at":"2024-11-26T16:09:05Z","published_at":"2022-05-17T04:58:58Z","references":["https://osv.dev/vulnerability/GHSA-q3rw-wcj6-8cjf","https://nvd.nist.gov/vuln/detail/CVE-2013-4183","https://github.com/openstack/cinder/commit/0ee31073c5cb432a9cdd2648e99aa802b0ed0a17","https://github.com/openstack/cinder/commit/68c597e26b5659a036a7a937622e539bac102308","https://bugs.launchpad.net/cinder/+bug/1198185","https://github.com/openstack/cinder","https://github.com/pypa/advisory-database/tree/main/vulns/cinder/PYSEC-2013-35.yaml","https://rhn.redhat.com/errata/RHSA-2013-1198.html","https://www.ubuntu.com/usn/USN-2005-1"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-q3rw-wcj6-8cjf","url":"https://osv.dev/vulnerability/GHSA-q3rw-wcj6-8cjf"}],"summary":"OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots"}