Tristan Cacqueray

Commented bugs

Critical

Fix Committed

#1321080 [OSSA 2014-021] auth token is exposed in meter http.request (CVE-2014-4615)

Ceilometer icehouse 266

Critical

Fix Committed

#1321080 [OSSA 2014-021] auth token is exposed in meter http.request (CVE-2014-4615)

oslo-incubator havana 266

Critical

New

#1380669 precreated router ports can enable cross tenant plugging

neutron icehouse 6

Critical

Fix Committed

#1398830 [OSSA 2015-003] Glance image leak when in saving state (CVE-2014-9623)

Glance juno 296

Critical

Fix Committed

#1425206 Setting debug mode also causes Pecan to run in debug mode

Cue 264

Critical

Fix Committed

#1461054 [OSSA 2015-012] Adding 0.0.0.0/0 to allowed address pairs breaks l2 agent (CVE-2015-3221)

neutron kilo 268

Critical

Fix Committed

#1471158 Incorrect regular expressions used for schema validation

Designate juno 260

Critical

Fix Committed

#1471158 Incorrect regular expressions used for schema validation

Designate kilo 260

Critical

Confirmed

#1546507 Regular user in non-default non-recommended configuration can delete any image file

Glance 42

Critical

Confirmed

#1546507 Regular user in non-default non-recommended configuration can delete any image file

Glance liberty 42

Critical

Confirmed

#1546507 Regular user in non-default non-recommended configuration can delete any image file

Glance ocata 42

Critical

Confirmed

#1546507 Regular user in non-default non-recommended configuration can delete any image file

Glance newton 42

Critical

Confirmed

#1546507 Regular user in non-default non-recommended configuration can delete any image file

Glance mitaka 42

High

Triaged

#832507 console.log grows indefinitely

qemu-kvm (Ubuntu) 118

High

Triaged

#1479385 Cause conflicts within glance public metadefs

Glance 22

High

Fix Committed

#1477910 A user can prevent another user listing images via v2 (in certain cases)

Glance Client kilo 266

High

Confirmed

#1549483 Normal user can replace active image data if show_multiple_locations has been set to true

Glance 14

High

Confirmed

#1555590 Image location can be used to capture user tokens

Glance 12

High

Confirmed

#1563954 use_forwarded_for exposes metadata

OpenStack Compute (nova) 10

High

Confirmed

#1572719 Client may hold socket open after ChunkWriteTimeout

OpenStack Object Storage (swift) 26

High

In Progress

#1655781 Swift object/proxy server writing Auth Token to log file (swauth)

Swift Authentication 262

High

Fix Committed

#1713783 After failed evacuation the recovered source compute tries to delete the instance

OpenStack Compute (nova) ocata 18

High

Fix Committed

#1713783 After failed evacuation the recovered source compute tries to delete the instance

OpenStack Compute (nova) pike 18

High

Fix Committed

#1664931 [OSSA-2017-005] nova rebuild ignores all image properties and scheduler filters (CVE-2017-16239)

OpenStack Compute (nova) newton 276

High

Fix Committed

#1664931 [OSSA-2017-005] nova rebuild ignores all image properties and scheduler filters (CVE-2017-16239)

OpenStack Compute (nova) ocata 276

High

Fix Committed

#1664931 [OSSA-2017-005] nova rebuild ignores all image properties and scheduler filters (CVE-2017-16239)

OpenStack Compute (nova) pike 276

High

Fix Committed

#1732976 [OSSA-2017-006] Potential DoS by rebuilding the same instance with a new image multiple times (CVE-2017-17051)

OpenStack Compute (nova) pike 278

High

In Progress

#1742102 Simple user can disable compute

OpenStack Compute (nova) 28

High

Fix Committed

#1750618 rebuild to same host with a different image results in erroneously doing a Claim

OpenStack Compute (nova) ocata 26

High

Fix Committed

#1750618 rebuild to same host with a different image results in erroneously doing a Claim

OpenStack Compute (nova) pike 26

High

Fix Committed

#1739646 Instance type with disk set to 0 can cause DoS

OpenStack Compute (nova) ocata 26

High

Fix Committed

#1739646 Instance type with disk set to 0 can cause DoS

OpenStack Compute (nova) pike 26

High

Fix Committed

#1739646 Instance type with disk set to 0 can cause DoS

OpenStack Compute (nova) queens 26

High

Confirmed

#1798904 tenant isolation is bypassed if port admin-state-up=false

OpenStack Compute (nova) 18

High

Fix Committed

#1837252 [OSSA-2019-004] Ageing time of 0 disables linuxbridge MAC learning (CVE-2019-15753)

os-vif stein 282

High

Fix Committed

#1837252 [OSSA-2019-004] Ageing time of 0 disables linuxbridge MAC learning (CVE-2019-15753)

Ubuntu Cloud Archive stein 282

Medium

Triaged

#1343657 Shell Injection in backup strategies

OpenStack DBaaS (Trove) 20

Medium

New

#1417762 XSS in network create error reporting

OpenStack Dashboard (Horizon) 12

Medium

Triaged

#1434545 Several command injection vulnerabilities in guestagent/pkg

OpenStack DBaaS (Trove) 10

Medium

Confirmed

#1447679 service No-VNC (port 6080) doesn't require authentication

OpenStack Compute (nova) 40

Medium

Triaged

#1534284 keystoneauth auth plugins should not use etree XML parsing

keystoneauth 6

Medium

Fix Committed

#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)

python-oslo.concurrency (Ubuntu Wily) 282

Medium

Fix Committed

#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)

Ubuntu Cloud Archive liberty 282

Medium

Fix Committed

#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)

Ubuntu Cloud Archive mitaka 282

Medium

Fix Committed

#1611171 re-runs self via sudo

OpenStack Compute (nova) newton 12

Medium

Triaged

#1688137 [OSSA-2021-003] Account name and UUID oracles in account locking (CVE-2021-38155)

OpenStack Identity (keystone) 268

Medium

Triaged

#1791973 User cannot list their own trusts

OpenStack Identity (keystone) 8

Medium

Confirmed

#1861893 os-assisted-volume-snapshots passes unsanitised file path to the libvirt driver

OpenStack Compute (nova) 14

Low

Confirmed

#1414529 eval being used in session.py

OpenStack Compute (nova) 6

Low

Confirmed

#1486026 When get evacuated instance of host through API filtering will cause the main nova process to block for an extended amount of time.

OpenStack Compute (nova) 6

Low

Triaged

#1618615 Potential information disclosure in EC2 "credentials"

OpenStack Identity (keystone) 14

Low

In Progress

#1649634 Insecure Randomness for AES Passphrase Generation

Cinder 10

Low

New

#1651679 horizon auth switch redir DoS

OpenStack Dashboard (Horizon) 8

Low

New

#1745555 MySQLdb escaping example incorrect

OpenStack Security Notes 6

Low

Confirmed

#1837339 CIDR's of the form 12.34.56.78/0 should be an error

OpenStack Dashboard (Horizon) 12

Low

Fix Committed

#1492140 [OSSA-2020-001] Nova can leak consoleauth token into log files (CVE-2015-9543)

OpenStack Compute (nova) rocky 272

Wishlist

Confirmed

#1381541 Object GET on deleted account is successful

OpenStack Object Storage (swift) 8

Wishlist

In Progress

#1522524 User can delete deactivated images

Glance 260

Wishlist

New

#1657139 XML Injection

OpenStack DBaaS (Trove) 8

Wishlist

Confirmed

#1674191 HTTPS connection and authentication are not supported between swift-proxy and swift-account-server/swift-container-server/swift-object-server.

OpenStack Object Storage (swift) 8

Undecided

Fix Committed

#1298698 [OSSA 2014-012] Remote Code Execution in Sheepdog backend (CVE-2014-0162)

Glance havana 262

Undecided

Fix Committed

#1327414 [OSSA 2014-020] www-authenticate value isn't quoted (CVE-2014-3497)

OpenStack Object Storage (swift) icehouse 270

Undecided

Fix Committed

#1321080 [OSSA 2014-021] auth token is exposed in meter http.request (CVE-2014-4615)

oslo-incubator icehouse 266

Undecided

Incomplete

#1337089 Pip temporarily diseappeared?

OpenStack Core Infrastructure 6

Undecided

New

#1341954 suds client subject to cache poisoning by local attacker

gantt 262

Undecided

New

#1339273 Sphinx documentation build failed in stable/havana: source_dir is not a directory

Glance havana 6

Undecided

Fix Committed

#1361360 Eventlet green threads not released back to the pool leading to choking of new requests

Glance icehouse 76

Undecided

Fix Committed

#1377981 [OSSA 2014-036] Missing fix for ssh_execute (Exceptions thrown may contain passwords) (CVE-2014-7230, CVE-2014-7231)

oslo-incubator icehouse 256

Undecided

Fix Committed

#1365350 [OSSA 2014-034] Metadata constraints defined in openstack documents doen't match implementation (CVE-2014-7960)

OpenStack Object Storage (swift) icehouse 258

Undecided

Fix Committed

#1378450 [OSSA 2014-039] Maliciously crafted dns_nameservers will crash neutron (CVE-2014-7821)

neutron icehouse 274

Undecided

Fix Committed

#1399172 [OSSA 2015-001] L3 agent DoS vulnerability (CVE-2014-8153)

neutron juno 264

Undecided

Fix Committed

#1361360 Eventlet green threads not released back to the pool leading to choking of new requests

neutron juno 76

Undecided

Incomplete

#1417304 Upload/Import image continues consuming glance host cpu/memory/network/disk resources even after the image is deleted

Glance 16

Undecided

New

#1447871 Several insecure /tmp usage in guestagent (CVE-2015-3156)

OpenStack DBaaS (Trove) 10

Undecided

Incomplete

#1443798 Restrict netmask of CIDR to avoid DHCP resync

neutron icehouse 264