CVE-2013-4183
Fixed in a distro release EPSS <1%
The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
Products: openstack cinder
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cinder | 7.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cinder | 2013.1.2-4 |
| Debian 13 | cinder | 2013.1.2-4 |
| Debian 14 | cinder | 2013.1.2-4 |
| Red Hat openstack 3 | openstack-cinder | 0:2013.1.3-2.el6ost |
| Red Hat openstack 3 | openstack-cinder-doc | 0:2013.1.3-2.el6ost |
| Red Hat openstack 3 | python-cinder | 0:2013.1.3-2.el6ost |