p PatchFirst

CVE-2012-2654

CVE-2012-2654

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

EPSS 2.6% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nova Debian:12

    Affected ranges
    • ECOSYSTEM: < 2012.1-6

    Update to 2012.1-6

  • nova Debian:13

    Affected ranges
    • ECOSYSTEM: < 2012.1-6

    Update to 2012.1-6

  • nova Debian:14

    Affected ranges
    • ECOSYSTEM: < 2012.1-6

    Update to 2012.1-6

  • nova PyPI

    Affected ranges
    • ECOSYSTEM: < 12.0.0a0

    Update to 12.0.0a0

Original sources

Check your server →