Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1305-1
Solution
Please Install the Updated Packages.
Insight
David Black discovered that Nova did not properly perform input validation during image registration. An attacker could exploit this by registering a crafted image using the EC2 API or S3/RegisterImage method and overwrite files as the nova user.
Affected
nova on Ubuntu 11.10
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2011-4596 -
CVSS Base Score: 6.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
Related Vulnerabilities