Revision Date: | 2017-08-09 | Version: | 1 | Title: | CVE-2015-2687 on Ubuntu 16.04 LTS (xenial) - low. | Description: | OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.
| Family: | unix | Class: | vulnerability | Status: | | Reference(s): | CVE-2015-2687
| Platform(s): | Ubuntu 16.04 LTS
| Product(s): | | Definition Synopsis | Ubuntu 16.04 LTS (xenial) is installed. AND Package Information
NOT nova-ajax-console-proxy package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-api package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-api-metadata package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-api-os-compute package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-api-os-volume package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-cells package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-cert package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-common package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-kvm package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-libvirt package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-lxc package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-qemu package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-vmware package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-compute-xen package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-conductor package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-console package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-consoleauth package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-network package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-novncproxy package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-scheduler package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-serialproxy package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-spiceproxy package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-volume package in xenial, while related to the CVE in some way, is not affected.
OR NOT nova-xvpvncproxy package in xenial, while related to the CVE in some way, is not affected.
OR NOT python-nova package in xenial, while related to the CVE in some way, is not affected.
|
|