CVE-2013-0208

Publication date 29 January 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users’ volumes via a volume id in the block_device_mapping parameter.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
nova 12.10 quantal
Fixed 2012.2.1+stable-20121212-a99a802e-0ubuntu1.1
12.04 LTS precise
Fixed 2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.1
11.10 oneiric
Fixed 2011.3-0ubuntu6.11
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-1709-1
    • OpenStack Nova vulnerability
    • 29 January 2013

Other references