CVE-2013-0208

Published: 29 January 2013

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.

Priority

Status

Package	Release	Status
nova Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Does not exist
	oneiric	Released (2011.3-0ubuntu6.11)
	precise	Released (2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.1)
	quantal	Released (2012.2.1+stable-20121212-a99a802e-0ubuntu1.1)
	upstream	Needs triage

References

https://ubuntu.com/security/notices/USN-1709-1
https://www.cve.org/CVERecord?id=CVE-2013-0208
NVD
Launchpad
Debian

Bugs

https://launchpad.net/bugs/1069904

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›