openstack-trove vulnerabilities
Adam Bell discovered that Trove incorrectly handled arguments to the backup command. A remote attacker could possibly use this issue to execute arbitrary code.
- Update to 2:17.0.0-0ubuntu1.1
Published Updated
PatchFirst · Latest vulnerabilities
openstack-trove vulnerabilities
Vulnerabilities published for openstack-trove in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2015-3156
The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategie
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.