CVE catalog

CVE-2019-14433

nova: CVE-2019-14433

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.94% · Oct 25, 2026

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannovasid2:34.0.0-4fixed
Debiannovaforky2:33.0.2-1fixed
Debiannovatrixie2:31.0.0-6+deb13u2fixed
Debiannovatrixie-security2:31.0.0-6+deb13u2fixed
Debiannovabookworm2:26.2.2-1~deb12u4fixed
Debiannovabookworm-security2:26.2.2-1~deb12u4fixed
Ubuntunova16.042:12.0.0-0ubuntu2vulnerable
Ubuntunova16.042:13.0.0~b1-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~b2-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~b3-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~rc1-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~rc3-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0-0ubuntu2vulnerable
Ubuntunova16.042:13.0.0-0ubuntu5vulnerable
Ubuntunova16.042:13.1.0-0ubuntu1vulnerable
Ubuntunova16.042:13.1.1-0ubuntu1vulnerable
Ubuntunova16.042:13.1.1-0ubuntu1.1vulnerable
Ubuntunova16.042:13.1.2-0ubuntu2vulnerable
Ubuntunova16.042:13.1.3-0ubuntu1vulnerable
Ubuntunova16.042:13.1.3-0ubuntu2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu1vulnerable
Ubuntunova16.042:13.1.4-0ubuntu2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu3vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.1vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.3vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.4vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.5fixed
Ubuntunova18.042:16.0.1-0ubuntu1vulnerable
Ubuntunova18.042:16.0.1-0ubuntu2vulnerable
Ubuntunova18.042:17.0.0~b1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~b2-0ubuntu2vulnerable
Ubuntunova18.042:17.0.0~b3-0ubuntu3vulnerable
Ubuntunova18.042:17.0.0~b3-0ubuntu4vulnerable
Ubuntunova18.042:17.0.0~rc1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~rc2-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~rc3-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0-0ubuntu1vulnerable
Ubuntunova18.042:17.0.1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.3-0ubuntu1vulnerable
Ubuntunova18.042:17.0.4-0ubuntu1vulnerable
Ubuntunova18.042:17.0.5-0ubuntu1vulnerable
Ubuntunova18.042:17.0.5-0ubuntu2vulnerable
Ubuntunova18.042:17.0.6-0ubuntu1vulnerable
Ubuntunova18.042:17.0.7-0ubuntu1vulnerable
Ubuntunova18.042:17.0.7-0ubuntu2vulnerable
Ubuntunova18.042:17.0.9-0ubuntu1vulnerable
Ubuntunova18.042:17.0.9-0ubuntu3vulnerable
Ubuntunova18.042:17.0.10-0ubuntu2vulnerable
Ubuntunova18.042:17.0.10-0ubuntu2.1fixed
Ubuntunova16.042:12.0.0-0ubuntu2vulnerable
Ubuntunova16.042:13.0.0~b1-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~b2-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~b3-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~rc1-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0~rc3-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0-0ubuntu1vulnerable
Ubuntunova16.042:13.0.0-0ubuntu2vulnerable
Ubuntunova16.042:13.0.0-0ubuntu5vulnerable
Ubuntunova16.042:13.1.0-0ubuntu1vulnerable
Ubuntunova16.042:13.1.1-0ubuntu1vulnerable
Ubuntunova16.042:13.1.1-0ubuntu1.1vulnerable
Ubuntunova16.042:13.1.2-0ubuntu2vulnerable
Ubuntunova16.042:13.1.3-0ubuntu1vulnerable
Ubuntunova16.042:13.1.3-0ubuntu2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu1vulnerable
Ubuntunova16.042:13.1.4-0ubuntu2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu3vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.1vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.2vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.3vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.4vulnerable
Ubuntunova16.042:13.1.4-0ubuntu4.5fixed
Ubuntunova18.042:16.0.1-0ubuntu1vulnerable
Ubuntunova18.042:16.0.1-0ubuntu2vulnerable
Ubuntunova18.042:17.0.0~b1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~b2-0ubuntu2vulnerable
Ubuntunova18.042:17.0.0~b3-0ubuntu3vulnerable
Ubuntunova18.042:17.0.0~b3-0ubuntu4vulnerable
Ubuntunova18.042:17.0.0~rc1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~rc2-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0~rc3-0ubuntu1vulnerable
Ubuntunova18.042:17.0.0-0ubuntu1vulnerable
Ubuntunova18.042:17.0.1-0ubuntu1vulnerable
Ubuntunova18.042:17.0.3-0ubuntu1vulnerable
Ubuntunova18.042:17.0.4-0ubuntu1vulnerable
Ubuntunova18.042:17.0.5-0ubuntu1vulnerable
Ubuntunova18.042:17.0.5-0ubuntu2vulnerable
Ubuntunova18.042:17.0.6-0ubuntu1vulnerable
Ubuntunova18.042:17.0.7-0ubuntu1vulnerable
Ubuntunova18.042:17.0.7-0ubuntu2vulnerable
Ubuntunova18.042:17.0.9-0ubuntu1vulnerable
Ubuntunova18.042:17.0.9-0ubuntu3vulnerable
Ubuntunova18.042:17.0.10-0ubuntu2vulnerable
Ubuntunova18.042:17.0.10-0ubuntu2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannovasourcesid2:19.0.2-1lowNot reported[934114]
Debiannovasourceforky2:19.0.2-1lowNot reported[934114]
Debiannovasourcetrixie2:19.0.2-1lowNot reported[934114]
Debiannovasourcebookworm2:19.0.2-1lowNot reported[934114]
Ubuntunovadeb16.042:13.1.4-0ubuntu4.5Not reportedUSN-4104-1Not reported
Ubuntunovadeb18.042:17.0.10-0ubuntu2.1Not reportedUSN-4104-1Not reported
Ubuntunovadeb16.042:13.1.4-0ubuntu4.5Not reportedUBUNTU-CVE-2019-14433Not reported
Ubuntunovadeb18.042:17.0.10-0ubuntu2.1Not reportedUBUNTU-CVE-2019-14433Not reported

[Debian bug #934114]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [nova-api]Unknown

    Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • [nova-common]Unknown

    Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • [nova-compute]Unknown

    Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • [nova-doc]Unknown

    Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

  • [python3-nova]Unknown

    Source package: [nova]

    Details (4)
    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · bookworm; dsa · nova · debian · 12

[Debian 13 (Trixie)]

  • [nova-api]Unknown

    Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • [nova-common]Unknown

    Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • [nova-compute]Unknown

    Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

  • Source package: [nova]

    Details (4)
    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Fixed · Fixed: 2:19.0.2-1

      dsa · nova · debian · 13

Next results

Observed:

References