CVE-2021-3654
Fixed in a distro release EPSS 27%
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
Products: openstack nova, redhat openstack_platform
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | nova | 21.2.3 |
| PyPI | nova | 22.2.3 |
| PyPI | nova | 23.0.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nova | 2:23.0.2-3 |
| Debian 13 | nova | 2:23.0.2-3 |
| Debian 14 | nova | 2:23.0.2-3 |
| Red Hat openstack 16.1 | openstack-nova | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-api | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-common | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-compute | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-conductor | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-console | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-migration | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-novncproxy | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-scheduler | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-serialproxy | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | openstack-nova-spicehtml5proxy | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.1 | python3-nova | 1:20.4.1-1.20220112153422.1ee93b9.el8ost |
| Red Hat openstack 16.2 | openstack-nova | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-api | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-common | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-compute | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-conductor | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-console | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-migration | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-novncproxy | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-scheduler | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-serialproxy | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | openstack-nova-spicehtml5proxy | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Red Hat openstack 16.2 | python3-nova | 1:20.6.2-2.20220112164912.8906554.el8ost |
| Ubuntu 18.04 LTS | nova | 2:17.0.13-0ubuntu5.3 |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.1 |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.2 |
| Ubuntu Pro 16.04 LTS | nova | 2:13.1.4-0ubuntu4.5+esm1 |