Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductGrizzly (45bd94e9-3932-5469-89a4-8778f134f485)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jtopjian/grizzly-docker purl2cpe 2026-06-01 10:17:03.434704
pkg:github/puppetlabs/puppetlabs-grizzly purl2cpe 2026-06-01 10:17:03.434706

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7130 vulnerable 2026-06-08 05:05:08.502807 Details available
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.
Published: 2014-02-06T16:00:00.000Z
Updated: 2024-08-06T18:01:19.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4497 vulnerable 2026-06-08 05:04:47.436906 Details available
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
Published: 2013-11-05T20:00:00.000Z
Updated: 2024-08-06T16:45:14.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4477 vulnerable 2026-06-08 05:04:47.244088 Details available
The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.
Published: 2013-11-02T19:00:00.000Z
Updated: 2024-08-06T16:45:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4469 vulnerable 2026-06-08 05:04:46.992943 Details available
OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.
Published: 2013-11-02T18:00:00.000Z
Updated: 2024-08-06T16:45:14.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4463 vulnerable 2026-06-08 05:04:46.945946 Details available
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.
Published: 2014-02-06T02:00:00.000Z
Updated: 2024-08-06T16:45:14.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4155 vulnerable 2026-06-08 05:04:34.240662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2161 vulnerable 2026-06-08 05:03:58.673921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2096 vulnerable 2026-06-08 05:03:58.323569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1664 vulnerable 2026-06-08 05:03:55.386221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5625 vulnerable 2026-06-08 05:02:57.602946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.