p PatchFirst

CVE-2019-14433

CVE-2019-14433

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

CVSS 6.5 · Medium · EPSS 1.9% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nova Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:19.0.2-1

    Update to 2:19.0.2-1

  • nova Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:19.0.2-1

    Update to 2:19.0.2-1

  • nova Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:19.0.2-1

    Update to 2:19.0.2-1

  • nova PyPI

    Versions
    • 15.1.5
    • 16.1.6
    • 16.1.7
    • 16.1.8
    • 17.0.10
    • 17.0.11
    • 17.0.7
    • 17.0.8
    • 17.0.9
    Affected ranges
    • ECOSYSTEM: < 17.0.12

    Update to 17.0.12

  • nova PyPI

    Versions
    • 18.0.2
    • 18.0.3
    • 18.1.0
    • 18.2.0
    • 18.2.1
    Affected ranges
    • ECOSYSTEM: ≥ 18.0.0, < 18.2.2

    Update to 18.2.2

  • nova PyPI

    Versions
    • 19.0.0
    • 19.0.1
    Affected ranges
    • ECOSYSTEM: ≥ 19.0.0, < 19.0.2

    Update to 19.0.2

  • nova PyPI

    Versions
    • 15.1.5
    • 16.1.6
    • 16.1.7
    • 16.1.8
    • 17.0.10
    • 17.0.11
    • 17.0.7
    • 17.0.8
    • 17.0.9
    • 18.0.2
    • 18.0.3
    • 18.1.0
    • 18.2.0
    • 18.2.1
    • 19.0.0
    • 19.0.1
    Affected ranges
    • ECOSYSTEM: ≥ 19.0.0, < 19.0.2 ∪ < 17.0.12 ∪ ≥ 18.0.0, < 18.2.2

    Update to 19.0.2; Update to 17.0.12; Update to 18.2.2

  • nova Ubuntu:16.04:LTS

    Versions
    • 2:12.0.0-0ubuntu2
    • 2:13.0.0~b1-0ubuntu1
    • 2:13.0.0~b2-0ubuntu1
    • 2:13.0.0~b3-0ubuntu1
    • 2:13.0.0~rc1-0ubuntu1
    • 2:13.0.0~rc3-0ubuntu1
    • 2:13.0.0-0ubuntu1
    • 2:13.0.0-0ubuntu2
    • 2:13.0.0-0ubuntu5
    • 2:13.1.0-0ubuntu1
    • 2:13.1.1-0ubuntu1
    • 2:13.1.1-0ubuntu1.1
    • 2:13.1.2-0ubuntu2
    • 2:13.1.3-0ubuntu1
    • 2:13.1.3-0ubuntu2
    • 2:13.1.4-0ubuntu1
    • 2:13.1.4-0ubuntu2
    • 2:13.1.4-0ubuntu3
    • 2:13.1.4-0ubuntu4.1
    • 2:13.1.4-0ubuntu4.2
    • 2:13.1.4-0ubuntu4.3
    • 2:13.1.4-0ubuntu4.4
    Affected ranges
    • ECOSYSTEM: < 2:13.1.4-0ubuntu4.5

    Update to 2:13.1.4-0ubuntu4.5

  • nova Ubuntu:18.04:LTS

    Versions
    • 2:16.0.1-0ubuntu1
    • 2:16.0.1-0ubuntu2
    • 2:17.0.0~b1-0ubuntu1
    • 2:17.0.0~b2-0ubuntu2
    • 2:17.0.0~b3-0ubuntu3
    • 2:17.0.0~b3-0ubuntu4
    • 2:17.0.0~rc1-0ubuntu1
    • 2:17.0.0~rc2-0ubuntu1
    • 2:17.0.0~rc3-0ubuntu1
    • 2:17.0.0-0ubuntu1
    • 2:17.0.1-0ubuntu1
    • 2:17.0.3-0ubuntu1
    • 2:17.0.4-0ubuntu1
    • 2:17.0.5-0ubuntu1
    • 2:17.0.5-0ubuntu2
    • 2:17.0.6-0ubuntu1
    • 2:17.0.7-0ubuntu1
    • 2:17.0.7-0ubuntu2
    • 2:17.0.9-0ubuntu1
    • 2:17.0.9-0ubuntu3
    • 2:17.0.10-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 2:17.0.10-0ubuntu2.1

    Update to 2:17.0.10-0ubuntu2.1

Original sources

Check your server →