GCVE - cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Openstack (`7b0cf974-b2b5-592e-bdf4-6953805ef02a`)
Product	Folsom (`8ecdbe88-cdbc-5247-8b01-a6bebce8f3cf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/jedipunkz/openstack_folsom_deploy`	purl2cpe	2026-06-01 10:17:03.246239

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4497`	vulnerable	2026-06-08 05:04:47.436932	Details available The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions. Published: 2013-11-05T20:00:00.000Z Updated: 2024-08-06T16:45:14.926Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/11/03/2 https://bugs.launchpad.net/nova/+bug/1202266 http://www.openwall.com/lists/oss-security/2013/11/03/3 https://bugs.launchpad.net/nova/+bug/1073306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4469`	vulnerable	2026-06-08 05:04:46.992918	Details available OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096. Published: 2013-11-02T18:00:00.000Z Updated: 2024-08-06T16:45:14.301Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/nova/+bug/1206081 http://www.openwall.com/lists/oss-security/2013/10/31/3 http://www.ubuntu.com/usn/USN-2247-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4463`	vulnerable	2026-06-08 05:04:46.945390	Details available OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096. Published: 2014-02-06T02:00:00.000Z Updated: 2024-08-06T16:45:14.837Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/nova/+bug/1206081 http://www.openwall.com/lists/oss-security/2013/10/31/3 http://www.ubuntu.com/usn/USN-2247-1 http://rhn.redhat.com/errata/RHSA-2014-0112.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4155`	vulnerable	2026-06-08 05:04:34.240052	Details available OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected. Published: 2013-08-20T22:00:00.000Z Updated: 2024-08-06T16:30:50.054Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/swift/+bug/1196932 http://www.debian.org/security/2012/dsa-2737 https://review.openstack.org/#/c/40646/ http://www.openwall.com/lists/oss-security/2013/08/07/6 http://www.ubuntu.com/usn/USN-2001-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2161`	vulnerable	2026-06-08 05:03:58.673895	Details available XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name. Published: 2013-08-20T22:00:00.000Z Updated: 2024-08-06T15:27:40.947Z Open on db.gcve.eu Reference links http://www.debian.org/security/2012/dsa-2737 http://lists.opensuse.org/opensuse-updates/2013-07/msg00021.html https://bugs.launchpad.net/swift/+bug/1183884 http://rhn.redhat.com/errata/RHSA-2013-0993.html http://www.openwall.com/lists/oss-security/2013/06/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2096`	vulnerable	2026-06-08 05:03:58.323543	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2030`	vulnerable	2026-06-08 05:03:57.933653	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1665`	vulnerable	2026-06-08 05:03:55.387352	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1664`	vulnerable	2026-06-08 05:03:55.385447	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0266`	vulnerable	2026-06-08 05:03:46.608725	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0261`	vulnerable	2026-06-08 05:03:46.586653	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0208`	vulnerable	2026-06-08 05:03:45.833839	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.