CVE-2023-2088
Fixed in a distro release EPSS 1%CVSS 6.5
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | cinder | 2:17.4.0-1~deb11u2 |
| Debian 12 | cinder | 2:21.1.0-3 |
| Debian 12 | nova | 2:26.1.0-4 |
| Debian 12 | python-glance-store | 4.1.0-4 |
| Debian 12 | python-os-brick | 4.1.0-3 |
| Debian 13 | cinder | 2:21.1.0-3 |
| Debian 13 | nova | 2:26.1.0-4 |
| Debian 13 | python-glance-store | 4.1.0-4 |
| Debian 13 | python-os-brick | 4.1.0-3 |
| Debian 14 | cinder | 2:21.1.0-3 |
| Debian 14 | nova | 2:26.1.0-4 |
| Debian 14 | python-glance-store | 4.1.0-4 |
| Debian 14 | python-os-brick | 4.1.0-3 |
| Red Hat openstack 13 | openstack-nova | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-api | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-cells | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-common | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-compute | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-conductor | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-console | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-migration | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-network | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-novncproxy | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-placement-api | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-scheduler | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-serialproxy | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | openstack-nova-spicehtml5proxy | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | python-glance-store | 0:0.23.1-0.20190916165255.cc7ecc1.el7ost |
| Red Hat openstack 13 | python-nova | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | python-nova-tests | 1:17.0.13-41.el7ost |
| Red Hat openstack 13 | python-os-brick | 0:2.3.9-12.el7ost |
| Red Hat openstack 13 | python2-glance-store | 0:0.23.1-0.20190916165255.cc7ecc1.el7ost |
| Red Hat openstack 13 | python2-os-brick | 0:2.3.9-12.el7ost |
| Red Hat openstack 16.1 | openstack-cinder | 1:15.4.0-1.20230510003501.58f0e73.el8ost |
| Red Hat openstack 16.1 | openstack-nova | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-api | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-common | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-compute | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-conductor | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-console | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-migration | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-novncproxy | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-scheduler | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-serialproxy | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | openstack-nova-spicehtml5proxy | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | python-glance-store | 0:1.0.2-1.20220219073735.el8ost |
| Red Hat openstack 16.1 | python-os-brick | 0:2.10.5-1.20220112193420.634fb4a.el8ost |
| Red Hat openstack 16.1 | python3-cinder | 1:15.4.0-1.20230510003501.58f0e73.el8ost |
| Red Hat openstack 16.1 | python3-glance-store | 0:1.0.2-1.20220219073735.el8ost |
| Red Hat openstack 16.1 | python3-nova | 1:20.4.1-1.20221005193232.el8ost |
| Red Hat openstack 16.1 | python3-os-brick | 0:2.10.5-1.20220112193420.634fb4a.el8ost |
| Red Hat openstack 16.2 | openstack-cinder | 1:15.6.1-2.20230310075425.a19c1c9.el8ost |
| Red Hat openstack 16.2 | openstack-nova | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-api | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-common | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-compute | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-conductor | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-console | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-migration | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-novncproxy | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-scheduler | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-serialproxy | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | openstack-nova-spicehtml5proxy | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | python-glance-store | 0:1.0.2-2.20230309124927.79e043a.el8ost |
| Red Hat openstack 16.2 | python-os-brick | 0:2.10.8-2.20220112064936.458bfad.el8ost |
| Red Hat openstack 16.2 | python3-cinder | 1:15.6.1-2.20230310075425.a19c1c9.el8ost |
| Red Hat openstack 16.2 | python3-glance-store | 0:1.0.2-2.20230309124927.79e043a.el8ost |
| Red Hat openstack 16.2 | python3-nova | 1:20.6.2-2.20230308185149.el8ost |
| Red Hat openstack 16.2 | python3-os-brick | 0:2.10.8-2.20220112064936.458bfad.el8ost |
| Red Hat openstack 16.2 | tripleo-ansible | 0:0.8.1-2.20230309004941.el8ost |
| Red Hat openstack 17.0 | openstack-cinder | 1:18.2.1-0.20230509200451.1776695.el9ost |
| Red Hat openstack 17.0 | openstack-nova | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-api | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-common | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-compute | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-conductor | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-migration | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-novncproxy | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-scheduler | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-serialproxy | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | openstack-nova-spicehtml5proxy | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | python-glance-store | 0:2.5.1-0.20230509140449.5f1cee6.el9ost |
| Red Hat openstack 17.0 | python-os-brick | 0:4.3.3-0.20220715140803.d09dc9e.el9ost |
| Red Hat openstack 17.0 | python3-cinder | 1:18.2.1-0.20230509200451.1776695.el9ost |
| Red Hat openstack 17.0 | python3-cinder-common | 1:18.2.1-0.20230509200451.1776695.el9ost |
| Red Hat openstack 17.0 | python3-glance-store | 0:2.5.1-0.20230509140449.5f1cee6.el9ost |
| Red Hat openstack 17.0 | python3-nova | 1:23.2.2-0.20221209190754.7074ac0.el9ost |
| Red Hat openstack 17.0 | python3-os-brick | 0:4.3.3-0.20220715140803.d09dc9e.el9ost |
| Red Hat openstack 17.0 | tripleo-ansible | 0:3.3.1-0.20221208161844.fa5422f.el9ost |
| Ubuntu 16.04 LTS | cinder | no fix |
| Ubuntu 16.04 LTS | ironic | no fix |
| Ubuntu 16.04 LTS | python-glance-store | no fix |
| Ubuntu 16.04 LTS | python-os-brick | no fix |
| Ubuntu 18.04 LTS | ironic | no fix |
| Ubuntu 18.04 LTS | python-glance-store | no fix |
| Ubuntu 18.04 LTS | python-os-brick | no fix |
| Ubuntu 20.04 LTS | cinder | 2:16.4.2-0ubuntu2.3 |
| Ubuntu 20.04 LTS | cinder | no fix |
| Ubuntu 20.04 LTS | cinder | 2:16.4.2-0ubuntu2.4 |
| Ubuntu 20.04 LTS | ironic | no fix |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.5 |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.4 |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.3 |
| Ubuntu 20.04 LTS | python-glance-store | 2.0.0-0ubuntu4.2 |
| Ubuntu 20.04 LTS | python-glance-store | no fix |
| Ubuntu 20.04 LTS | python-glance-store | 2.0.0-0ubuntu4.1 |
| Ubuntu 20.04 LTS | python-os-brick | no fix |
| Ubuntu 20.04 LTS | python-os-brick | 3.0.8-0ubuntu1.1 |
| Ubuntu 20.04 LTS | python-os-brick | 3.0.8-0ubuntu1.2 |
| Ubuntu 22.04 LTS | cinder | 2:20.1.0-0ubuntu2.2 |
| Ubuntu 22.04 LTS | cinder | 2:20.1.0-0ubuntu2.1 |
| Ubuntu 22.04 LTS | cinder | 2:20.2.0-0ubuntu1.1 |
| Ubuntu 22.04 LTS | ironic | 1:20.1.0-0ubuntu1.1 |
| Ubuntu 22.04 LTS | nova | 3:25.1.0-0ubuntu2.2 |
| Ubuntu 22.04 LTS | nova | 3:25.1.0-0ubuntu2.1 |
| Ubuntu 22.04 LTS | nova | 3:25.1.1-0ubuntu1.1 |
| Ubuntu 22.04 LTS | python-glance-store | 3.0.0-0ubuntu1.3 |
| Ubuntu 22.04 LTS | python-glance-store | 3.0.0-0ubuntu1.2 |
| Ubuntu 22.04 LTS | python-glance-store | 3.0.0-0ubuntu1.1 |
| Ubuntu 22.04 LTS | python-os-brick | 5.2.2-0ubuntu1.1 |
| Ubuntu 22.04 LTS | python-os-brick | 5.2.2-0ubuntu1.2 |
| Ubuntu 22.04 LTS | python-os-brick | 5.2.2-0ubuntu1 |
| Ubuntu Pro 16.04 LTS | nova | no fix |
| Ubuntu Pro 18.04 LTS | cinder | no fix |
| Ubuntu Pro 18.04 LTS | nova | no fix |
| Ubuntu Pro 20.04 LTS | nova | no fix |