NVD

Id
36564  
Name
CVE-2013-0208  
Description
The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users" volumes via a volume id in the block_device_mapping parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-02-13  
Modified Date
2013-02-14  
Seq
2013-0208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186773 36564 CVE-2013-0208 RHSA-2013:0208  View
186774 36564 CVE-2013-0208 [oss-security] 20130129 [OSSA 2013-001] Boot from volume allows access to random volumes (CVE-2013-0208)  View
186775 36564 CVE-2013-0208 57613  View
186776 36564 CVE-2013-0208 USN-1709-1  View
186777 36564 CVE-2013-0208 nova-volume-security-bypass(81697)  View
186778 36564 CVE-2013-0208 https://bugs.launchpad.net/nova/+bug/1069904  View
186779 36564 CVE-2013-0208 https://bugzilla.redhat.com/show_bug.cgi?id=902629  View
186780 36564 CVE-2013-0208 https://github.com/openstack/nova/commit/243d516cea9d3caa5a8267b12d2f577dcb24193b  View
186781 36564 CVE-2013-0208 https://github.com/openstack/nova/commit/317cc0af385536dee43ef2addad50a91357fc1ad  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19997 JVNDB-2013-001572 OpenStack Compute Folsom および Essex における他のユーザのボリュームからブートされる脆弱性 OpenStack Compute (Nova) Folsom および Essex の VM 起動 (boot-from-volume) 機能には、nova-volume を使用している場合、他のユーザのボリュームからブートされる脆弱性が存在します。 CVE-2013-0208 60150 CVE-2013-0208 36564 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001572.html 2013-01-29 2013-02-18 View