PT-2019-6662 · Openstack · Nova

Publicado 2019-04-22 · Atualizado 2022-04-22 · CVE-2011-3147

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions nova versions prior to 2012.1

Description The issue allows hypervisor host files to be exposed to a guest operating system when a maliciously constructed qcow filesystem is processed.

Recommendations For versions prior to 2012.1, update to version 2012.1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-3147

GHSA-HQFX-4X4W-VMWP

Produtos afetados

Nova

Referências · 8

• https://github.com/openstack/nova/commit/ff9d353b2f4fee469e530fbc8dc231a41f6fed84 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3147 · Nota de Segurança
• http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604 · Correção
• https://osv.dev/vulnerability/GHSA-hqfx-4x4w-vmwp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-3147 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3147 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-3147 · Aviso do Fabricante
• https://bugs.launchpad.net/nova/+bug/853330 · Nota