CVE-2013-1068: Medium severity Ubuntu vulnerability
The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1068?
CVE-2013-1068 has been classified as a medium severity vulnerability.
How do I fix CVE-2013-1068?
To mitigate CVE-2013-1068, upgrade the OpenStack Nova and Cinder packages to the latest patched versions available for your Ubuntu distribution.
Which software is affected by CVE-2013-1068?
CVE-2013-1068 affects the OpenStack Nova and Cinder packages on Ubuntu versions 13.10 and 14.04 LTS.
What are the vulnerable versions associated with CVE-2013-1068?
The vulnerable versions of OpenStack Nova and Cinder are 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2.
Is there a workaround for CVE-2013-1068?
There are no specific workarounds for CVE-2013-1068; the recommended action is to upgrade the affected packages.