OpenStack Security Advisory: 2013-019 CVE: CVE-2013-2256 Date: August 6, 2013 Title: Resource limit circumvention in Nova private flavors Reporter: hzrandd (NetEase) Products: Nova Affects: All versions Description: hzrandd from NetEase reported a resource limit circumvention vulnerability in Nova's handling of private flavors. Any tenant is able to show and boot any other tenant's private flavors by guessing a flavor ID. This not only exposes the flavor's name, memory and disk size, swap allocation, VCPU count and similar flavor properties, but potentially allows circumvention of any resource limits enforced through the os-flavor-access:is_public property. Havana (development branch) fix: https://review.openstack.org/34963 Grizzly fix: https://review.openstack.org/37992 Folsom fix: https://review.openstack.org/38318 Notes: This fix is included in the havana-2 development milestone and will appear in a future 2013.1.3 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2256 https://bugs.launchpad.net/nova/+bug/1194093 -- Jeremy Stanley OpenStack Vulnerability Management Team -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 966 bytes Desc: Digital signature URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130806/65992ec1/attachment.sig>