USN-5835-3: Nova vulnerability
Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Nova incorrectly handled VMDK image processing. An authenticated attacker could possibly supply a specially crafted VMDK flat image and obtain arbitrary files from the server containing sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-5835-3?
The severity of USN-5835-3 is categorized as high due to the potential for an authenticated attacker to exploit the vulnerability.
How do I fix USN-5835-3?
To fix USN-5835-3, upgrade to the appropriate package versions specified in the advisory for your Ubuntu release.
What is the impact of USN-5835-3?
The impact of USN-5835-3 allows an authenticated attacker to read arbitrary files from the server which may contain sensitive information.
Which Ubuntu versions are affected by USN-5835-3?
USN-5835-3 affects Ubuntu 22.10, 22.04, and 20.04 with specific versions of nova-common and python3-nova.
Who discovered the USN-5835-3 vulnerability?
The USN-5835-3 vulnerability was discovered by Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou.