USN-1734-1: OpenStack Nova vulnerability
21 February 2013
Nova could be made to crash if it received specially crafted input.
- nova - OpenStack Compute cloud infrastructure
Joshua Harlow discovered that Nova would allow XML entity processing. A
remote unauthenticated attacker could exploit this using the Nova API to
cause a denial of service via resource exhaustion. (CVE-2013-1664)
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.