UBUNTU-CVE-2023-2088

See a problem?
Source
https://ubuntu.com/security/CVE-2023-2088
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-2088
Related
Published
2023-05-10T15:00:00Z
Modified
2023-05-10T15:00:00Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

References

Affected packages

Ubuntu:Pro:16.04:LTS / cinder

Package

Name
cinder
Purl
pkg:deb/ubuntu/cinder?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:7.*

2:7.0.0-0ubuntu1

2:8.*

2:8.0.0~b1-0ubuntu1
2:8.0.0~b2-0ubuntu2
2:8.0.0~b3-0ubuntu2
2:8.0.0~rc1-0ubuntu2
2:8.0.0-0ubuntu1
2:8.1.0-0ubuntu1
2:8.1.1-0ubuntu1
2:8.1.1-0ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:12.*

2:12.0.0-0ubuntu2

2:13.*

2:13.0.0~b1-0ubuntu1
2:13.0.0~b2-0ubuntu1
2:13.0.0~b3-0ubuntu1
2:13.0.0~rc1-0ubuntu1
2:13.0.0~rc3-0ubuntu1
2:13.0.0-0ubuntu1
2:13.0.0-0ubuntu2
2:13.0.0-0ubuntu5
2:13.1.0-0ubuntu1
2:13.1.1-0ubuntu1
2:13.1.1-0ubuntu1.1
2:13.1.2-0ubuntu2
2:13.1.3-0ubuntu1
2:13.1.3-0ubuntu2
2:13.1.4-0ubuntu1
2:13.1.4-0ubuntu2
2:13.1.4-0ubuntu3
2:13.1.4-0ubuntu4.1
2:13.1.4-0ubuntu4.2
2:13.1.4-0ubuntu4.3
2:13.1.4-0ubuntu4.4
2:13.1.4-0ubuntu4.5
2:13.1.4-0ubuntu4.5+esm1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / python-glance-store

Package

Name
python-glance-store
Purl
pkg:deb/ubuntu/python-glance-store?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.9.1-1ubuntu1
0.10.0-1
0.13.0-0ubuntu1
0.13.0-3
0.13.0-3ubuntu0.16.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / python-os-brick

Package

Name
python-os-brick
Purl
pkg:deb/ubuntu/python-os-brick?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.0-0ubuntu2
0.5.0-2fakesync1

1.*

1.1.0-1
1.2.0-2
1.2.0-2ubuntu0.1
1.2.0-2ubuntu0.2
1.2.0-2ubuntu0.3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / ironic

Package

Name
ironic
Purl
pkg:deb/ubuntu/ironic?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:4.*

1:4.2.0-0ubuntu1
1:4.3.0-0ubuntu1

1:5.*

1:5.1.0-0ubuntu1
1:5.1.2-0ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / cinder

Package

Name
cinder
Purl
pkg:deb/ubuntu/cinder?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:11.*

2:11.0.0-0ubuntu2
2:11.0.0-0ubuntu3

2:12.*

2:12.0.0~b1-0ubuntu1
2:12.0.0~b2-0ubuntu2
2:12.0.0~rc1-0ubuntu1
2:12.0.0~rc2-0ubuntu1
2:12.0.0~rc2-0ubuntu2
2:12.0.0-0ubuntu1
2:12.0.1-0ubuntu1
2:12.0.3-0ubuntu1
2:12.0.4-0ubuntu1
2:12.0.5-0ubuntu1
2:12.0.7-0ubuntu2
2:12.0.9-0ubuntu1
2:12.0.9-0ubuntu1.2
2:12.0.10-0ubuntu1
2:12.0.10-0ubuntu2
2:12.0.10-0ubuntu2.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:16.*

2:16.0.1-0ubuntu1
2:16.0.1-0ubuntu2

2:17.*

2:17.0.0~b1-0ubuntu1
2:17.0.0~b2-0ubuntu2
2:17.0.0~b3-0ubuntu3
2:17.0.0~b3-0ubuntu4
2:17.0.0~rc1-0ubuntu1
2:17.0.0~rc2-0ubuntu1
2:17.0.0~rc3-0ubuntu1
2:17.0.0-0ubuntu1
2:17.0.1-0ubuntu1
2:17.0.3-0ubuntu1
2:17.0.4-0ubuntu1
2:17.0.5-0ubuntu1
2:17.0.5-0ubuntu2
2:17.0.6-0ubuntu1
2:17.0.7-0ubuntu1
2:17.0.7-0ubuntu2
2:17.0.9-0ubuntu1
2:17.0.9-0ubuntu3
2:17.0.10-0ubuntu2
2:17.0.10-0ubuntu2.1
2:17.0.11-0ubuntu1
2:17.0.12-0ubuntu1
2:17.0.13-0ubuntu1
2:17.0.13-0ubuntu2
2:17.0.13-0ubuntu3
2:17.0.13-0ubuntu4
2:17.0.13-0ubuntu5
2:17.0.13-0ubuntu5.2
2:17.0.13-0ubuntu5.3
2:17.0.13-0ubuntu5.4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / python-glance-store

Package

Name
python-glance-store
Purl
pkg:deb/ubuntu/python-glance-store?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.22.0-0ubuntu1
0.23.0-0ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / python-os-brick

Package

Name
python-os-brick
Purl
pkg:deb/ubuntu/python-os-brick?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.15.2-0ubuntu1

2.*

2.1.1-0ubuntu1
2.3.0-0ubuntu1
2.3.0-0ubuntu1.2
2.3.0-0ubuntu1.3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / ironic

Package

Name
ironic
Purl
pkg:deb/ubuntu/ironic?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:9.*

1:9.1.0-0ubuntu2
1:9.2.0-0ubuntu1

1:10.*

1:10.0.0-0ubuntu1
1:10.1.0-0ubuntu1
1:10.1.1-0ubuntu1
1:10.1.1-0ubuntu2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / cinder

Package

Name
cinder
Purl
pkg:deb/ubuntu/cinder?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:15.*

2:15.0.0-0ubuntu1

2:16.*

2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1
2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1
2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1
2:16.0.0-0ubuntu0.20.04.1
2:16.1.0-0ubuntu1
2:16.2.0-0ubuntu1
2:16.2.1-0ubuntu1
2:16.2.1-0ubuntu2
2:16.3.0-0ubuntu1
2:16.4.0-0ubuntu1
2:16.4.1-0ubuntu1
2:16.4.2-0ubuntu2
2:16.4.2-0ubuntu2.1
2:16.4.2-0ubuntu2.2
2:16.4.2-0ubuntu2.3
2:16.4.2-0ubuntu2.4
2:16.4.2-0ubuntu2.5
2:16.4.2-0ubuntu2.6
2:16.4.2-0ubuntu2.8

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / ironic

Package

Name
ironic
Purl
pkg:deb/ubuntu/ironic?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:13.*

1:13.0.1-0ubuntu1

1:14.*

1:14.0.0~b1~git2019121713.76597ca93-0ubuntu1
1:14.0.0~b1~git2019121713.76597ca93-0ubuntu2
1:14.0.0-0ubuntu1
1:14.0.1~git2020032415.de2d907fc-0ubuntu1
1:14.0.1~git2020041013.af9e6ba90-0ubuntu2

1:15.*

1:15.0.0-0ubuntu0.20.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:20.*

2:20.0.0-0ubuntu1

2:21.*

2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1
2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2
2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4
2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5
2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2
2:21.0.0-0ubuntu0.20.04.1
2:21.0.0-0ubuntu0.20.04.2
2:21.1.0-0ubuntu1
2:21.1.1-0ubuntu2
2:21.1.2-0ubuntu1
2:21.2.0-0ubuntu1
2:21.2.1-0ubuntu1
2:21.2.2-0ubuntu1
2:21.2.3-0ubuntu1
2:21.2.4-0ubuntu1
2:21.2.4-0ubuntu2
2:21.2.4-0ubuntu2.1
2:21.2.4-0ubuntu2.2
2:21.2.4-0ubuntu2.3
2:21.2.4-0ubuntu2.4
2:21.2.4-0ubuntu2.5
2:21.2.4-0ubuntu2.6
2:21.2.4-0ubuntu2.8
2:21.2.4-0ubuntu2.11
2:21.2.4-0ubuntu2.13

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / python-glance-store

Package

Name
python-glance-store
Purl
pkg:deb/ubuntu/python-glance-store?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.0.0-0ubuntu1
1.1.0-0ubuntu2
1.1.0-0ubuntu3

2.*

2.0.0-0ubuntu1
2.0.0-0ubuntu2
2.0.0-0ubuntu3
2.0.0-0ubuntu4
2.0.0-0ubuntu4.1
2.0.0-0ubuntu4.2
2.0.0-0ubuntu4.3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / python-os-brick

Package

Name
python-os-brick
Purl
pkg:deb/ubuntu/python-os-brick?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.10.0-0ubuntu1
2.11.0-0ubuntu1

3.*

3.0.0-0ubuntu1
3.0.1-0ubuntu1
3.0.1-0ubuntu1.2
3.0.1-0ubuntu1.3
3.0.1-0ubuntu1.4
3.0.8-0ubuntu1
3.0.8-0ubuntu1.1
3.0.8-0ubuntu1.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / cinder

Package

Name
cinder
Purl
pkg:deb/ubuntu/cinder?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:20.2.0-0ubuntu1.1

Affected versions

2:19.*

2:19.0.0-0ubuntu2
2:19.0.0+git2022030310.b49fb59a6-0ubuntu1
2:19.0.0+git2022030310.b49fb59a6-0ubuntu2

2:20.*

2:20.0.0-0ubuntu1
2:20.0.1-0ubuntu1
2:20.1.0-0ubuntu1
2:20.1.0-0ubuntu2.1
2:20.1.0-0ubuntu2.2
2:20.2.0-0ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "cinder-api"
        },
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "cinder-backup"
        },
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "cinder-common"
        },
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "cinder-scheduler"
        },
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "cinder-volume"
        },
        {
            "binary_version": "2:20.2.0-0ubuntu1.1",
            "binary_name": "python3-cinder"
        }
    ]
}

Ubuntu:22.04:LTS / ironic

Package

Name
ironic
Purl
pkg:deb/ubuntu/ironic?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:20.1.0-0ubuntu1.1

Affected versions

1:18.*

1:18.2.0-0ubuntu1
1:18.2.0+git2021120910.cdc3b9538-0ubuntu1

1:19.*

1:19.0.0+git2022011216.7beadee46-0ubuntu1

1:20.*

1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1
1:20.1.0-0ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "1:20.1.0-0ubuntu1.1",
            "binary_name": "ironic-api"
        },
        {
            "binary_version": "1:20.1.0-0ubuntu1.1",
            "binary_name": "ironic-common"
        },
        {
            "binary_version": "1:20.1.0-0ubuntu1.1",
            "binary_name": "ironic-conductor"
        },
        {
            "binary_version": "1:20.1.0-0ubuntu1.1",
            "binary_name": "python3-ironic"
        }
    ]
}

Ubuntu:22.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3:25.1.1-0ubuntu1.1

Affected versions

3:24.*

3:24.0.0-0ubuntu1
3:24.0.0+git2022030310.3f274c65cc-0ubuntu2

3:25.*

3:25.0.0-0ubuntu1
3:25.0.0-0ubuntu1.1
3:25.0.1-0ubuntu1
3:25.1.0-0ubuntu1
3:25.1.0-0ubuntu2
3:25.1.0-0ubuntu2.1
3:25.1.0-0ubuntu2.2
3:25.1.1-0ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-ajax-console-proxy"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-api"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-api-metadata"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-api-os-compute"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-api-os-volume"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-cells"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-common"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-ironic"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-kvm"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-libvirt"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-lxc"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-qemu"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-vmware"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-compute-xen"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-conductor"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-doc"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-novncproxy"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-scheduler"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-serialproxy"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-spiceproxy"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "nova-volume"
        },
        {
            "binary_version": "3:25.1.1-0ubuntu1.1",
            "binary_name": "python3-nova"
        }
    ]
}

Ubuntu:22.04:LTS / python-glance-store

Package

Name
python-glance-store
Purl
pkg:deb/ubuntu/python-glance-store?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.0-0ubuntu1.3

Affected versions

2.*

2.7.0-0ubuntu1

3.*

3.0.0-0ubuntu1
3.0.0-0ubuntu1.1
3.0.0-0ubuntu1.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "3.0.0-0ubuntu1.3",
            "binary_name": "python-glance-store-doc"
        },
        {
            "binary_version": "3.0.0-0ubuntu1.3",
            "binary_name": "python3-glance-store"
        }
    ]
}

Ubuntu:22.04:LTS / python-os-brick

Package

Name
python-os-brick
Purl
pkg:deb/ubuntu/python-os-brick?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.2-0ubuntu1.2

Affected versions

5.*

5.0.1-0ubuntu1
5.1.0-0ubuntu1
5.2.0-0ubuntu1
5.2.2-0ubuntu1
5.2.2-0ubuntu1.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "5.2.2-0ubuntu1.2",
            "binary_name": "os-brick-common"
        },
        {
            "binary_version": "5.2.2-0ubuntu1.2",
            "binary_name": "python-os-brick-doc"
        },
        {
            "binary_version": "5.2.2-0ubuntu1.2",
            "binary_name": "python3-os-brick"
        }
    ]
}