CVE-2011-4596 OpenStack Nova Multiple directory traversal vulnerabilities

What is CVE-2011-4596?

CVE-2011-4596 is a medium-severity path traversal vulnerability in n/a, published on 23 Dec 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

Weakness: CWE-22

Which versions are affected by CVE-2011-4596?

3 open source packages ship an affected version, including nova. It affects 1 product.

Products include Openstack Nova.

How do I fix CVE-2011-4596?

Upgrade nova to 12.0.0a0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2011-4596 being exploited?

There is no known exploitation of CVE-2011-4596 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-7214 OpenStack Nova logs sensitive context from notification exceptions Critical 9.8
• CVE-2017-17051 OpenStack Nova DoS by rebuilding the same instance with a new image multiple times High 8.6
• CVE-2020-17376 OpenStack Nova Live migration fails to update persistent domain XML High 8.3
• CVE-2017-18191 OpenStack Nova Denial of service attack on the compute host High 7.5
• CVE-2015-3280 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-4596, GHSA-qr62-r9xc-r2gj, PYSEC-2026-881.