GR
Product
Grizzly
14
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Grizzly to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-0335 | 7.6 | Mar 22 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC… Affected: 2012.2 |
| CVE-2013-7130 | – | Feb 6 | The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block… Affected: All versions, or not specified |
| CVE-2013-4463 | – | Feb 6 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file… Affected: All versions, or not specified |
| CVE-2013-2030 | – | Dec 27 | keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to… Affected: 2013.1 |
| CVE-2013-4497 | – | Nov 5 | The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live… Affected: All versions, or not specified |
| CVE-2013-4477 | – | Nov 2 | The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which… Affected: All versions, or not specified |
| CVE-2013-4469 | – | Nov 2 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a… Affected: All versions, or not specified |
| CVE-2013-4261 | – | Oct 29 | OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote… Affected: through - |
| CVE-2013-4155 | – | Aug 20 | OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster… Affected: All versions, or not specified |
| CVE-2013-2161 | – | Aug 20 | XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name Affected: All versions, or not specified |
| CVE-2013-2096 | – | Jul 9 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system… Affected: All versions, or not specified |
| CVE-2013-1664 | – | Apr 3 | The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django;… Affected: All versions, or not specified |
| CVE-2013-1838 | – | Mar 22 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial… Affected: 2012.2 |
| CVE-2012-5625 | – | Dec 26 | OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating… Affected: All versions, or not specified |
Showing 14