OpenStack Nova CVE-2012-3447 Memory Corruption Vulnerability

Bugtraq ID:	54869
Class:	Unknown
CVE:	CVE-2012-3447
Remote:	Yes
Local:	No
Published:	Aug 07 2012 12:00AM
Updated:	Apr 13 2015 09:42PM
Credit:	Pádraig Brady
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 OpenStack OpenStack Compute (Nova) 2012.2 OpenStack OpenStack Compute (Nova) 2012.1 OpenStack OpenStack Compute (Nova) 2011.3
Not Vulnerable:	OpenStack OpenStack Compute (Nova) 2012.1.2

OpenStack Nova CVE-2012-3447 Memory Corruption Vulnerability

OpenStack Nova is prone to a memory-corruption vulnerability.

Attackers may exploit this vulnerability to cause a denial of service or gain elevated privileges.

Note: This issue exists due to an incomplete fix for CVE-2012-3361 (identified in BID 54278 - OpenStack Nova CVE-2012-3361 Memory Corruption Vulnerability).

OpenStack Nova CVE-2012-3447 Memory Corruption Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenStack Nova CVE-2012-3447 Memory Corruption Vulnerability

References:

• CVE-2012-3361 not fully addressed (P?draig Brady)
  
• OpenStack Homepage (OpenStack)
  
• OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447) (Thierry Carrez)