Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/nova@2011.2
purl pkg:pypi/nova@2011.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
PYSEC-2012-41
Aliases:
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical … There are no reported fixed by versions.
PYSEC-2012-21
Aliases:
CVE-2012-3447
GHSA-xc4g-7vw8-924h
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files … There are no reported fixed by versions.
PYSEC-2012-36
Aliases:
CVE-2012-2101
GHSA-hq3f-9gf7-73r8
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated … There are no reported fixed by versions.
PYSEC-2012-37
Aliases:
CVE-2012-2654
GHSA-46r8-9cj7-pw6g
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not … There are no reported fixed by versions.
PYSEC-2012-38
Aliases:
CVE-2012-3360
GHSA-m454-cm7h-rqhh
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows … There are no reported fixed by versions.
PYSEC-2012-39
Aliases:
CVE-2012-3361
GHSA-cm54-3vvf-f5p8
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files … There are no reported fixed by versions.
PYSEC-2012-40
Aliases:
CVE-2012-3371
GHSA-xxgm-qpj5-4886
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote … There are no reported fixed by versions.
This package is not known to fix any advisories.