CVE-2019-14433
Fixed in a distro release EPSS 2%
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.
Products: openstack nova, canonical ubuntu_linux, redhat openstack, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | nova | 17.0.12 |
| PyPI | nova | 18.2.2 |
| PyPI | nova | 19.0.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | nova | 2:18.1.0-6+deb10u1 |
| Debian 12 | nova | 2:19.0.2-1 |
| Debian 13 | nova | 2:19.0.2-1 |
| Debian 14 | nova | 2:19.0.2-1 |
| Red Hat openstack 10 | openstack-nova | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-api | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-cells | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-cert | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-common | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-compute | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-conductor | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-console | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-migration | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-network | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-novncproxy | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-placement-api | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-scheduler | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-serialproxy | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | openstack-nova-spicehtml5proxy | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | python-nova | 1:14.1.0-56.el7ost |
| Red Hat openstack 10 | python-nova-tests | 1:14.1.0-56.el7ost |
| Red Hat openstack 13 | openstack-nova | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-api | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-cells | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-common | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-compute | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-conductor | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-console | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-migration | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-network | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-novncproxy | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-placement-api | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-scheduler | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-serialproxy | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | openstack-nova-spicehtml5proxy | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | python-nova | 1:17.0.10-6.el7ost |
| Red Hat openstack 13 | python-nova-tests | 1:17.0.10-6.el7ost |
| Red Hat openstack 14 | openstack-nova | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-api | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-cells | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-common | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-compute | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-conductor | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-console | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-migration | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-network | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-novncproxy | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-placement-api | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-scheduler | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-serialproxy | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | openstack-nova-spicehtml5proxy | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | python-nova | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Red Hat openstack 14 | python-nova-tests | 1:18.2.1-0.20190509150817.8e130e2.el7ost |
| Ubuntu 16.04 LTS | nova | 2:13.1.4-0ubuntu4.5 |
| Ubuntu 18.04 LTS | nova | 2:17.0.10-0ubuntu2.1 |