USN-6884-1: Nova vulnerability
Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability identified as USN-6884-1?
USN-6884-1 is a vulnerability in Nova that incorrectly handles QCOW2 image processing, allowing authenticated users to access arbitrary files on the server.
What are the potential consequences of the USN-6884-1 vulnerability?
The USN-6884-1 vulnerability could expose sensitive information by allowing unauthorized access to files on the server.
How do I fix the USN-6884-1 vulnerability?
To fix USN-6884-1, update the affected packages to version 3:29.0.1-0ubuntu1.3 for Ubuntu 24.04 or other specified remedial versions for previous Ubuntu releases.
Which versions of Ubuntu are affected by the USN-6884-1 vulnerability?
The USN-6884-1 vulnerability affects Ubuntu versions 20.04, 22.04, 23.10, and 24.04 with specific package versions listed.
Who discovered the vulnerability USN-6884-1?
The vulnerability USN-6884-1 was discovered by Martin Kaesberger.