GCVE - cpe:2.3:a:openstack:havana:havana-1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:havana:havana-1:*:*:*:*:*:*:*

part: a version: havana-1 update: *

Vendor	Openstack (`7b0cf974-b2b5-592e-bdf4-6953805ef02a`)
Product	Havana (`f67b8963-b067-56e5-b5d5-51a071aa1dd4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/puppetlabs/puppetlabs-havana`	purl2cpe	2026-06-01 10:17:03.417187

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4497`	vulnerable	2026-06-03 14:33:17.319626	Details available The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions. Published: 2013-11-05T20:00:00.000Z Updated: 2024-08-06T16:45:14.926Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/11/03/2 https://bugs.launchpad.net/nova/+bug/1202266 http://www.openwall.com/lists/oss-security/2013/11/03/3 https://bugs.launchpad.net/nova/+bug/1073306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4179`	vulnerable	2026-06-03 14:33:10.106798	Details available The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Published: 2013-09-16T19:00:00.000Z Updated: 2024-08-06T16:38:00.185Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-1199.html https://bugs.launchpad.net/ossa/+bug/1190229 http://www.ubuntu.com/usn/USN-2005-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2030`	vulnerable	2026-06-03 14:32:53.276492	Details available keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora. Published: 2013-12-27T01:00:00.000Z Updated: 2024-08-06T15:20:37.504Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/05/09/2 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html http://lists.openstack.org/pipermail/openstack-announce/2013-May/000098.html https://bugs.launchpad.net/nova/+bug/1174608 https://bugzilla.redhat.com/show_bug.cgi?id=958285	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.