CVE-2013-0335
CVE-2013-0335 · Openstack nova: vnc proxy can connect to the wrong vm
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.
CVSS 7.6 · High · EPSS 2.1% · Fix available
- Published
- Updated
Affected products and versions
openstack folsom for rhel 6
- Versions
- ≥ 0:2012.2.3-7.el6ost: Not affected (rpm)
No fix published
red hat openstack platform 13 (queens)
No fix published
red hat openstack platform 16.2
No fix published
red hat openstack platform 17.1
No fix published
red hat openstack platform 18.0
No fix published
nova Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1.1-14
Update to 2012.1.1-14
nova Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1.1-14
Update to 2012.1.1-14
nova Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1.1-14
Update to 2012.1.1-14
nova PyPI
- Affected ranges
- ECOSYSTEM: < 12.0.0a0
Update to 12.0.0a0
Original sources
- http://rhn.redhat.com/errata/RHSA-2013-0709.html
- http://secunia.com/advisories/52337
- http://secunia.com/advisories/52728
- http://www.openwall.com/lists/oss-security/2013/02/26/7
- http://www.osvdb.org/90657
- http://www.ubuntu.com/usn/USN-1771-1
- https://access.redhat.com/errata/RHSA-2013:0709
- https://access.redhat.com/security/cve/CVE-2013-0335
- https://bugs.launchpad.net/nova/+bug/1125378
- https://github.com/advisories/GHSA-qfp8-hfqx-c79c
- https://review.openstack.org/#/c/22086/
- https://review.openstack.org/#/c/22758
- https://review.openstack.org/#/c/22872/
- https://nvd.nist.gov/vuln/detail/CVE-2013-0335