rhsa-2015:2673
Vulnerability from csaf_redhat
Published
2015-12-21 16:51
Modified
2024-11-14 17:18
Summary
Red Hat Security Advisory: openstack-nova security and bug fix advisory

Notes

Topic
Updated OpenStack Compute packages that resolve various issues are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 for RHEL 7.
Details
OpenStack Compute (nova) launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances and controlling access through users and projects. A vulnerability was discovered in the way OpenStack Compute (nova) networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances. (CVE-2015-7713) Additional updates include: * The openstack-nova packages have been upgraded to upstream version 2015.1.2. See https://launchpad.net/nova/kilo/2015.1.2 for a complete list of bug fixes and enhancements. (BZ#1274875) * When using huge pages, the back-end memory for a guest was configured as private. This disallowed an external process connected to a vhostuser VIF type to access the QEMU guest's memory, which is required by the QEMU network driver functionality. The memory mappings are now marked as shared, and the external process to provide QEMU network is able to access the guest's memory. (BZ#1215790) * The termination of a WSGI application or an RPC server immediately stopped the service and interrupted requests that were in progress. This update adds a graceful handler for the SIGTERM signal sent to the parent WSGI process, so the termination is performed gracefully, which allows ongoing processes to continue. (BZ#1250269) * Previously, novaclient records requested time even when timing was set to False. As a consequence, system memory kept increasing. With this update, when timing is set to True, the time of each request is recorded and the timings are reset to clear the memory, which no longer increases. (BZ#1260868) * An earlier update changed the return value when no host devices were found when connecting to an iSCSI or iSER volume. Consequently, when no host devices were found, an exception was thrown and the connect volume attempt failed. This update adds an additional check to ensure os.path.exists(None) is never called. As a result, an exception is no longer thrown and the connect logic correctly retries finding present host devices. (BZ#1268051) * Compute's rootwrap filters restricted an `ln` command used by the volume encryption providers to a specific iSCSI related target path. Consequently, iSER, NFS, and FC volumes encountered failures because the `ln` command was rejected by Compute's rootwrap filters. This update makes Nova's rootwrap filters more generic when calling `ln` allowing the volume encryption providers to succeed. (BZ#1273466) * FCoE devices have different sysfs paths to standard FC devices. Consequently, Nova failed when attempting to attach an FCoE based volume to an instance as it assumed these paths were the same. This update ensures that the required PCI information is parsed from both FC and FCoE sysfs device paths. As a result, Nova now succeeds in attaching FCoE based volumes to instances. (BZ#1274054) * Nova failed to parse the output from the `multipath -l ${device}` command when errors were present. Consequently, the attaching and detaching of volumes could fail. This update corrects the find_multipath_device method to ensure that any errors present in the output from the aforementioned command are ignored. As a result, both the attaching and detaching of volumes will now succeed even if errors occur. (BZ#1275937) * Volumes were not correctly detached if an error was encountered during the attach process, and could be left attached to an instance, resulting in data loss. This update ensures that the volume is both detached and the connection to the volume closed in the event of a failure during the attach process. (BZ#1276011) * The ability of the libvirt driver to set the admin password has been added. To use this feature, run the following command: nova root-password [server] (BZ#1261100)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated OpenStack Compute packages that resolve various issues are now\navailable for Red Hat Enterprise Linux OpenStack Platform 7.0 for\nRHEL 7.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenStack Compute (nova) launches and schedules large networks of virtual\nmachines, creating a redundant and scalable cloud computing platform.\nCompute provides the software, control panels, and APIs required to\norchestrate a cloud, including running virtual machine instances and\ncontrolling access through users and projects.\n\nA vulnerability was discovered in the way OpenStack Compute (nova)\nnetworking handled security group updates; changes were not applied to\nalready running VM instances. A remote attacker could use this flaw to\naccess running VM instances. (CVE-2015-7713)\n\nAdditional updates include:\n\n* The openstack-nova packages have been upgraded to upstream version \n2015.1.2. See https://launchpad.net/nova/kilo/2015.1.2 for a complete list\nof bug fixes and enhancements. (BZ#1274875)\n\n* When using huge pages, the back-end memory for a guest was configured as\nprivate. This disallowed an external process connected to a vhostuser VIF\ntype to access the QEMU guest\u0027s memory, which is required by the QEMU\nnetwork driver functionality. The memory mappings are now marked as\nshared, and the external process to provide QEMU network is able to access\nthe guest\u0027s memory. (BZ#1215790)\n\n* The termination of a WSGI application or an RPC server immediately\nstopped the service and interrupted requests that were in progress. This\nupdate adds a graceful handler for the SIGTERM signal sent to the parent\nWSGI process, so the termination is performed gracefully, which allows\nongoing processes to continue. (BZ#1250269)\n\n* Previously, novaclient records requested time even when timing was set \nto False. As a consequence, system memory kept increasing. With this\nupdate, when timing is set to True, the time of each request is recorded \nand the timings are reset to clear the memory, which no longer\nincreases. (BZ#1260868)\n\n* An earlier update changed the return value when no host devices were\nfound when connecting to an iSCSI or iSER volume. Consequently, when no\nhost devices were found, an exception was thrown and the connect volume\nattempt failed. This update adds an additional check to ensure\nos.path.exists(None) is never called. As a result, an exception is no\nlonger thrown and the connect logic correctly retries finding present\nhost devices. (BZ#1268051)\n\n* Compute\u0027s rootwrap filters restricted an `ln` command used by the volume\nencryption providers to a specific iSCSI related target path. Consequently,\niSER, NFS, and FC volumes encountered failures because the `ln` command was\nrejected by Compute\u0027s rootwrap filters. This update makes Nova\u0027s rootwrap\nfilters more generic when calling `ln` allowing the volume encryption\nproviders to succeed. (BZ#1273466)\n\n* FCoE devices have different sysfs paths to standard FC devices.\nConsequently, Nova failed when attempting to attach an FCoE based volume\nto an instance as it assumed these paths were the same. This update ensures\nthat the required PCI information is parsed from both FC and FCoE sysfs\ndevice paths. As a result, Nova now succeeds in attaching FCoE based\nvolumes to instances. (BZ#1274054)\n\n* Nova failed to parse the output from the `multipath -l ${device}` command\nwhen errors were present. Consequently, the attaching and detaching of\nvolumes could fail. This update corrects the find_multipath_device method\nto ensure that any errors present in the output from the aforementioned\ncommand are ignored. As a result, both the attaching and detaching of\nvolumes will now succeed even if errors occur. (BZ#1275937)\n\n* Volumes were not correctly detached if an error was encountered during\nthe attach process, and could be left attached to an instance, resulting\nin data loss. This update ensures that the volume is both detached\nand the connection to the volume closed in the event of a failure during\nthe attach process. (BZ#1276011)\n\n* The ability of the libvirt driver to set the admin password has been \nadded. To use this feature, run the following command:  \n    nova root-password [server]\n(BZ#1261100)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:2673",
        "url": "https://access.redhat.com/errata/RHSA-2015:2673"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1249751",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1249751"
      },
      {
        "category": "external",
        "summary": "1261100",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1261100"
      },
      {
        "category": "external",
        "summary": "1268051",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268051"
      },
      {
        "category": "external",
        "summary": "1269119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1269119"
      },
      {
        "category": "external",
        "summary": "1273466",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1273466"
      },
      {
        "category": "external",
        "summary": "1274054",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274054"
      },
      {
        "category": "external",
        "summary": "1274875",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274875"
      },
      {
        "category": "external",
        "summary": "1275937",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1275937"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2673.json"
      }
    ],
    "title": "Red Hat Security Advisory: openstack-nova security and bug fix advisory",
    "tracking": {
      "current_release_date": "2024-11-14T17:18:53+00:00",
      "generator": {
        "date": "2024-11-14T17:18:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2015:2673",
      "initial_release_date": "2015-12-21T16:51:35+00:00",
      "revision_history": [
        {
          "date": "2015-12-21T16:51:35+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-12-21T16:51:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T17:18:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenStack 7.0 Tools for RHEL 7",
                "product": {
                  "name": "OpenStack 7.0 Tools for RHEL 7",
                  "product_id": "7Client-RH7-RHOS-TOOLS-7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:7::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
                "product": {
                  "name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
                  "product_id": "7Server-RH7-RHOS-7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:7::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "OpenStack 7.0 Tools for RHEL 7",
                "product": {
                  "name": "OpenStack 7.0 Tools for RHEL 7",
                  "product_id": "7Server-RH7-RHOS-TOOLS-7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:7::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "OpenStack 7.0 Tools for RHEL 7",
                "product": {
                  "name": "OpenStack 7.0 Tools for RHEL 7",
                  "product_id": "7Workstation-RH7-RHOS-TOOLS-7.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:7::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-novaclient-1:2.23.0-2.el7ost.noarch",
                "product": {
                  "name": "python-novaclient-1:2.23.0-2.el7ost.noarch",
                  "product_id": "python-novaclient-1:2.23.0-2.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-novaclient@2.23.0-2.el7ost?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
                "product": {
                  "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
                  "product_id": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-novaclient-doc@2.23.0-2.el7ost?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-cells@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-console@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-compute@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-novncproxy@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-nova-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "python-nova-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "python-nova-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-nova@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-serialproxy@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-objectstore@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-network@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-spicehtml5proxy@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-scheduler@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-common@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-api@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-cert@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-conductor@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
                "product": {
                  "name": "openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
                  "product_id": "openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova-doc@2015.1.2-7.el7ost?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-novaclient-1:2.23.0-2.el7ost.src",
                "product": {
                  "name": "python-novaclient-1:2.23.0-2.el7ost.src",
                  "product_id": "python-novaclient-1:2.23.0-2.el7ost.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-novaclient@2.23.0-2.el7ost?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-0:2015.1.2-7.el7ost.src",
                "product": {
                  "name": "openstack-nova-0:2015.1.2-7.el7ost.src",
                  "product_id": "openstack-nova-0:2015.1.2-7.el7ost.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-nova@2015.1.2-7.el7ost?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Client-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.src as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.src",
        "relates_to_product_reference": "7Client-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Client-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-0:2015.1.2-7.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.src"
        },
        "product_reference": "openstack-nova-0:2015.1.2-7.el7ost.src",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-api-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-api-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-cells-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-cells-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-cert-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-cert-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-common-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-common-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-compute-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-compute-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-console-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-console-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-doc-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-doc-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-network-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-network-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nova-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:python-nova-0:2015.1.2-7.el7ost.noarch"
        },
        "product_reference": "python-nova-0:2015.1.2-7.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.src"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.src",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
          "product_id": "7Server-RH7-RHOS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.src as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.src",
        "relates_to_product_reference": "7Server-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Server-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Workstation-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-1:2.23.0-2.el7ost.src as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src"
        },
        "product_reference": "python-novaclient-1:2.23.0-2.el7ost.src",
        "relates_to_product_reference": "7Workstation-RH7-RHOS-TOOLS-7.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7",
          "product_id": "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
        },
        "product_reference": "python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
        "relates_to_product_reference": "7Workstation-RH7-RHOS-TOOLS-7.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-7713",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2015-10-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1269119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was discovered in the way OpenStack Compute (nova) networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openstack-nova: network security group changes are not applied to running instances",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
          "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
          "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.src",
          "7Server-RH7-RHOS-7.0:openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:python-nova-0:2015.1.2-7.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
          "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
          "7Server-RH7-RHOS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
          "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
          "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
          "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
          "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
          "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
          "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7713"
        },
        {
          "category": "external",
          "summary": "RHBZ#1269119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1269119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7713",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7713"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7713",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7713"
        }
      ],
      "release_date": "2015-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-12-21T16:51:35+00:00",
          "details": "Before applying this update, ensure all previously released errata relevant\nto your system have been applied.\n\nRed Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise\nLinux 7.2.\n\nThe Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the\nfollowing:\n* An explanation of the way in which the provided components interact to\nform a working cloud computing environment.\n* Technology Previews, Recommended Practices, and Known Issues.\n* The channels required for Red Hat Enterprise Linux OpenStack Platform 7,\nincluding which channels need to be enabled and disabled.\n\nThe Release Notes are available at:\nhttps://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes/\n\nThis update is available through \u0027yum update\u0027 on systems registered through\nRed Hat Subscription Manager. For more information about Red Hat\nSubscription Manager, see:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html",
          "product_ids": [
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.src",
            "7Server-RH7-RHOS-7.0:openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-nova-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Server-RH7-RHOS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2673"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Client-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-0:2015.1.2-7.el7ost.src",
            "7Server-RH7-RHOS-7.0:openstack-nova-api-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-cells-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-cert-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-common-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-compute-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-console-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-doc-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-network-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-nova-0:2015.1.2-7.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Server-RH7-RHOS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Server-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.noarch",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-1:2.23.0-2.el7ost.src",
            "7Workstation-RH7-RHOS-TOOLS-7.0:python-novaclient-doc-1:2.23.0-2.el7ost.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openstack-nova: network security group changes are not applied to running instances"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.