Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
Privilege Escalation
Denial Of Service
Openstack
Nova
NVD
GitHub
CVSS 2.0
3.5
EPSS
0.9%
DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Ubuntu
Canonical
Ubuntu Linux
Gnome
+1
NVD
CVSS 2.0
2.1
EPSS
0.1%