| OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraintsCVE-2026-46448 · GHSA-MFG3-P6M3-GJGRVersion ranges need review. |
novaRed Hat OpenStack Platform 16.2/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3517 · GHSA-XJMJ-P278-4JP5Version ranges need review. |
novaRed Hat OpenStack Platform 3/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) has Insufficient Verification of Data AuthenticityCVE-2015-0259 · GHSA-X8XR-RM9R-7MVFVersion ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) allows remote attackers to bypass intended restrictionCVE-2015-7713 · GHSA-67RH-9P29-VRXRVersion ranges need review. |
nova |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attackCVE-2013-4179 · GHSA-J6XH-Q826-55JWVersion ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (nova) allows remote authenticated users to cause a denial of serviceCVE-2015-3280 · GHSA-MFMJ-GWG3-VHW7Version ranges need review. |
nova |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Nova instance migration process does not stop when instance is deletedCVE-2015-3241 · GHSA-3VX7-XFF6-H2VXVersion ranges need review. |
nova |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) Denial of Service vulnerabilityCVE-2014-3708 · GHSA-43HC-PWVX-PMFGVersion ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of serviceCVE-2014-3608 · GHSA-92HC-C226-32Q7Version ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive informationCVE-2013-2256 · GHSA-5MJ6-643F-2G85Version ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Cinder, glance, and Nova vulnerable to Path TraversalCVE-2022-47951 · GHSA-7H75-HWXX-QPGCVersion ranges need review. |
cinderglance |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Nova calls qemu-img without format restrictions for resize CVE-2026-24708 · GHSA-M4F3-QP2W-GWH6Version ranges need review. |
novaRed Hat OpenStack Platform 16.2/rhosp-rhel8/openstack-nova-compute |
PyPIRed Hat |
High
|
No fix reported |
|
| OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file accessCVE-2024-32498 · GHSA-R4V4-W9PV-6FPHVersion ranges need review. |
cinderglance |
PyPI |
High
|
No fix reported |
|
| OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource ConsumptionCVE-2015-5162 · GHSA-G2J5-7VGX-6XRXVersion ranges need review. |
cinderglance |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Nova vulnerable to unauthorized access to potentially sensitive data CVE-2024-40767 · GHSA-RM86-H44C-2R2MVersion ranges need review. |
nova |
PyPI |
Medium
|
No fix reported |
|
| OpenStack Compute (Nova) Resource limit circumvention in Nova private flavorsCVE-2013-4278 · GHSA-43CM-73PX-5V4MVersion ranges need review. |
nova |
PyPI |
Low
|
Fix reported |
|
| OpenStack Nova VMware instance leak potentially leading to compute DoSCVE-2014-8333 · GHSA-G63P-MFCM-54C4Version ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 imageCVE-2013-4469 · GHSA-2W87-5QCJ-J6GXVersion ranges need review. |
novaRed Hat OpenStack Platform 3/openstack-nova |
PyPIRed Hat |
Low
|
Fix reported |
|
| OpenStack Nova Potential Xen connection password leak via StorageErrorCVE-2015-8749 · GHSA-C36R-G737-9QP8Version ranges need review. |
nova |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Nova denial of service through compressed disk imagesCVE-2013-4463 · GHSA-5644-2V3H-5W4XVersion ranges need review. |
novaRed Hat OpenStack Platform 4/openstack-nova |
PyPIRed Hat |
Low
|
Fix reported |
|
