{"id":"UBUNTU-CVE-2023-2088","details":"A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.","modified":"2026-02-04T02:33:57.901895Z","published":"2023-05-10T15:00:00Z","related":["USN-6073-1","USN-6073-2","USN-6073-3","USN-6073-4","USN-6073-5","USN-6073-6","USN-6073-7","USN-6073-8","USN-6073-9","USN-6241-1"],"upstream":["CVE-2023-2088"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-2088"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-2"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-3"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-4"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-5"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-6"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-7"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-8"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6073-9"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6241-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2023-2088"}],"affected":[{"package":{"name":"cinder","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/cinder@2:8.1.1-0ubuntu3?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.0.0-0ubuntu1","2:8.0.0~b1-0ubuntu1","2:8.0.0~b2-0ubuntu2","2:8.0.0~b3-0ubuntu2","2:8.0.0~rc1-0ubuntu2","2:8.0.0-0ubuntu1","2:8.1.0-0ubuntu1","2:8.1.1-0ubuntu1","2:8.1.1-0ubuntu3"],"ecosystem_specific":{"binaries":[{"binary_name":"cinder-api","binary_version":"2:8.1.1-0ubuntu3"},{"binary_name":"cinder-backup","binary_version":"2:8.1.1-0ubuntu3"},{"binary_name":"cinder-common","binary_version":"2:8.1.1-0ubuntu3"},{"binary_name":"cinder-scheduler","binary_version":"2:8.1.1-0ubuntu3"},{"binary_name":"cinder-volume","binary_version":"2:8.1.1-0ubuntu3"},{"binary_name":"python-cinder","binary_version":"2:8.1.1-0ubuntu3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"nova","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/nova@2:13.1.4-0ubuntu4.5+esm1?arch=source&distro=esm-infra/xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:12.0.0-0ubuntu2","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc3-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.0-0ubuntu2","2:13.0.0-0ubuntu5","2:13.1.0-0ubuntu1","2:13.1.1-0ubuntu1","2:13.1.1-0ubuntu1.1","2:13.1.2-0ubuntu2","2:13.1.3-0ubuntu1","2:13.1.3-0ubuntu2","2:13.1.4-0ubuntu1","2:13.1.4-0ubuntu2","2:13.1.4-0ubuntu3","2:13.1.4-0ubuntu4.1","2:13.1.4-0ubuntu4.2","2:13.1.4-0ubuntu4.3","2:13.1.4-0ubuntu4.4","2:13.1.4-0ubuntu4.5","2:13.1.4-0ubuntu4.5+esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"nova-ajax-console-proxy","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-api","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-api-metadata","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-api-os-compute","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_version":"2:13.1.4-0ubuntu4.5+esm1","binary_name":"nova-api-os-volume"},{"binary_name":"nova-cells","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-cert","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-common","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-compute","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_version":"2:13.1.4-0ubuntu4.5+esm1","binary_name":"nova-compute-kvm"},{"binary_name":"nova-compute-libvirt","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-compute-lxc","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-compute-qemu","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-compute-vmware","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-compute-xen","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_version":"2:13.1.4-0ubuntu4.5+esm1","binary_name":"nova-conductor"},{"binary_name":"nova-console","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-consoleauth","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_version":"2:13.1.4-0ubuntu4.5+esm1","binary_name":"nova-network"},{"binary_name":"nova-novncproxy","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-scheduler","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-serialproxy","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-spiceproxy","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-volume","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"nova-xvpvncproxy","binary_version":"2:13.1.4-0ubuntu4.5+esm1"},{"binary_name":"python-nova","binary_version":"2:13.1.4-0ubuntu4.5+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-glance-store","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/python-glance-store@0.13.0-3ubuntu0.16.04.1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.1-1ubuntu1","0.10.0-1","0.13.0-0ubuntu1","0.13.0-3","0.13.0-3ubuntu0.16.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"glance-store-common","binary_version":"0.13.0-3ubuntu0.16.04.1"},{"binary_name":"python-glance-store","binary_version":"0.13.0-3ubuntu0.16.04.1"},{"binary_version":"0.13.0-3ubuntu0.16.04.1","binary_name":"python3-glance-store"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-os-brick","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/python-os-brick@1.2.0-2ubuntu0.3?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.5.0-0ubuntu2","0.5.0-2fakesync1","1.1.0-1","1.2.0-2","1.2.0-2ubuntu0.1","1.2.0-2ubuntu0.2","1.2.0-2ubuntu0.3"],"ecosystem_specific":{"binaries":[{"binary_name":"os-brick-common","binary_version":"1.2.0-2ubuntu0.3"},{"binary_name":"python-os-brick","binary_version":"1.2.0-2ubuntu0.3"},{"binary_name":"python3-os-brick","binary_version":"1.2.0-2ubuntu0.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"ironic","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/ironic@1:5.1.2-0ubuntu1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.0-0ubuntu1","1:4.3.0-0ubuntu1","1:5.1.0-0ubuntu1","1:5.1.2-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"ironic-api","binary_version":"1:5.1.2-0ubuntu1"},{"binary_name":"ironic-common","binary_version":"1:5.1.2-0ubuntu1"},{"binary_name":"ironic-conductor","binary_version":"1:5.1.2-0ubuntu1"},{"binary_name":"python-ironic","binary_version":"1:5.1.2-0ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"cinder","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/cinder@2:12.0.10-0ubuntu2.2+esm1?arch=source&distro=esm-infra/bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:11.0.0-0ubuntu2","2:11.0.0-0ubuntu3","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu2","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0~rc2-0ubuntu2","2:12.0.0-0ubuntu1","2:12.0.1-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.4-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.7-0ubuntu2","2:12.0.9-0ubuntu1","2:12.0.9-0ubuntu1.2","2:12.0.10-0ubuntu1","2:12.0.10-0ubuntu2","2:12.0.10-0ubuntu2.2","2:12.0.10-0ubuntu2.2+esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"cinder-api","binary_version":"2:12.0.10-0ubuntu2.2+esm1"},{"binary_version":"2:12.0.10-0ubuntu2.2+esm1","binary_name":"cinder-backup"},{"binary_name":"cinder-common","binary_version":"2:12.0.10-0ubuntu2.2+esm1"},{"binary_name":"cinder-scheduler","binary_version":"2:12.0.10-0ubuntu2.2+esm1"},{"binary_name":"cinder-volume","binary_version":"2:12.0.10-0ubuntu2.2+esm1"},{"binary_name":"python-cinder","binary_version":"2:12.0.10-0ubuntu2.2+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"nova","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/nova@2:17.0.13-0ubuntu5.4+esm1?arch=source&distro=esm-infra/bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2","2:17.0.10-0ubuntu2.1","2:17.0.11-0ubuntu1","2:17.0.12-0ubuntu1","2:17.0.13-0ubuntu1","2:17.0.13-0ubuntu2","2:17.0.13-0ubuntu3","2:17.0.13-0ubuntu4","2:17.0.13-0ubuntu5","2:17.0.13-0ubuntu5.2","2:17.0.13-0ubuntu5.3","2:17.0.13-0ubuntu5.4","2:17.0.13-0ubuntu5.4+esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"nova-ajax-console-proxy","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-api","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-api-metadata","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_version":"2:17.0.13-0ubuntu5.4+esm1","binary_name":"nova-api-os-compute"},{"binary_name":"nova-api-os-volume","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-cells","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-common","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_version":"2:17.0.13-0ubuntu5.4+esm1","binary_name":"nova-compute"},{"binary_name":"nova-compute-kvm","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_version":"2:17.0.13-0ubuntu5.4+esm1","binary_name":"nova-compute-libvirt"},{"binary_name":"nova-compute-lxc","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-compute-qemu","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-compute-vmware","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-compute-xen","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-conductor","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-console","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-consoleauth","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-network","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-novncproxy","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-placement-api","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-scheduler","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-serialproxy","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-spiceproxy","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-volume","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"nova-xvpvncproxy","binary_version":"2:17.0.13-0ubuntu5.4+esm1"},{"binary_name":"python-nova","binary_version":"2:17.0.13-0ubuntu5.4+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-glance-store","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/python-glance-store@0.23.0-0ubuntu1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.22.0-0ubuntu1","0.23.0-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"glance-store-common","binary_version":"0.23.0-0ubuntu1"},{"binary_name":"python-glance-store","binary_version":"0.23.0-0ubuntu1"},{"binary_version":"0.23.0-0ubuntu1","binary_name":"python3-glance-store"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-os-brick","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/python-os-brick@2.3.0-0ubuntu1.3?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.2-0ubuntu1","2.1.1-0ubuntu1","2.3.0-0ubuntu1","2.3.0-0ubuntu1.2","2.3.0-0ubuntu1.3"],"ecosystem_specific":{"binaries":[{"binary_name":"os-brick-common","binary_version":"2.3.0-0ubuntu1.3"},{"binary_version":"2.3.0-0ubuntu1.3","binary_name":"python-os-brick"},{"binary_name":"python3-os-brick","binary_version":"2.3.0-0ubuntu1.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"ironic","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/ironic@1:10.1.1-0ubuntu2?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.1.0-0ubuntu2","1:9.2.0-0ubuntu1","1:10.0.0-0ubuntu1","1:10.1.0-0ubuntu1","1:10.1.1-0ubuntu1","1:10.1.1-0ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"ironic-api","binary_version":"1:10.1.1-0ubuntu2"},{"binary_name":"ironic-common","binary_version":"1:10.1.1-0ubuntu2"},{"binary_name":"ironic-conductor","binary_version":"1:10.1.1-0ubuntu2"},{"binary_name":"python-ironic","binary_version":"1:10.1.1-0ubuntu2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"cinder","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/cinder@2:16.4.2-0ubuntu2.9?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2","2:16.4.2-0ubuntu2.3","2:16.4.2-0ubuntu2.4","2:16.4.2-0ubuntu2.5","2:16.4.2-0ubuntu2.6","2:16.4.2-0ubuntu2.8","2:16.4.2-0ubuntu2.9"],"ecosystem_specific":{"binaries":[{"binary_name":"cinder-api","binary_version":"2:16.4.2-0ubuntu2.9"},{"binary_name":"cinder-backup","binary_version":"2:16.4.2-0ubuntu2.9"},{"binary_name":"cinder-common","binary_version":"2:16.4.2-0ubuntu2.9"},{"binary_name":"cinder-scheduler","binary_version":"2:16.4.2-0ubuntu2.9"},{"binary_name":"cinder-volume","binary_version":"2:16.4.2-0ubuntu2.9"},{"binary_name":"python3-cinder","binary_version":"2:16.4.2-0ubuntu2.9"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"nova","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/nova@2:21.2.4-0ubuntu2.14+esm2?arch=source&distro=esm-infra/focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:20.0.0-0ubuntu1","2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5","2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2","2:21.0.0-0ubuntu0.20.04.1","2:21.0.0-0ubuntu0.20.04.2","2:21.1.0-0ubuntu1","2:21.1.1-0ubuntu2","2:21.1.2-0ubuntu1","2:21.2.0-0ubuntu1","2:21.2.1-0ubuntu1","2:21.2.2-0ubuntu1","2:21.2.3-0ubuntu1","2:21.2.4-0ubuntu1","2:21.2.4-0ubuntu2","2:21.2.4-0ubuntu2.1","2:21.2.4-0ubuntu2.2","2:21.2.4-0ubuntu2.3","2:21.2.4-0ubuntu2.4","2:21.2.4-0ubuntu2.5","2:21.2.4-0ubuntu2.6","2:21.2.4-0ubuntu2.8","2:21.2.4-0ubuntu2.11","2:21.2.4-0ubuntu2.13","2:21.2.4-0ubuntu2.14","2:21.2.4-0ubuntu2.14+esm1","2:21.2.4-0ubuntu2.14+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"nova-ajax-console-proxy","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_version":"2:21.2.4-0ubuntu2.14+esm2","binary_name":"nova-api"},{"binary_name":"nova-api-metadata","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-api-os-compute","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-api-os-volume","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-cells","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-common","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-kvm","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-libvirt","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-lxc","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-qemu","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-vmware","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-compute-xen","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-conductor","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-novncproxy","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-scheduler","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-serialproxy","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-spiceproxy","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"nova-volume","binary_version":"2:21.2.4-0ubuntu2.14+esm2"},{"binary_name":"python3-nova","binary_version":"2:21.2.4-0ubuntu2.14+esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-glance-store","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/python-glance-store@2.0.0-0ubuntu4.3?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-0ubuntu1","1.1.0-0ubuntu2","1.1.0-0ubuntu3","2.0.0-0ubuntu1","2.0.0-0ubuntu2","2.0.0-0ubuntu3","2.0.0-0ubuntu4","2.0.0-0ubuntu4.1","2.0.0-0ubuntu4.2","2.0.0-0ubuntu4.3"],"ecosystem_specific":{"binaries":[{"binary_name":"python3-glance-store","binary_version":"2.0.0-0ubuntu4.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-os-brick","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/python-os-brick@3.0.8-0ubuntu1.2?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.0-0ubuntu1","2.11.0-0ubuntu1","3.0.0-0ubuntu1","3.0.1-0ubuntu1","3.0.1-0ubuntu1.2","3.0.1-0ubuntu1.3","3.0.1-0ubuntu1.4","3.0.8-0ubuntu1","3.0.8-0ubuntu1.1","3.0.8-0ubuntu1.2"],"ecosystem_specific":{"binaries":[{"binary_name":"os-brick-common","binary_version":"3.0.8-0ubuntu1.2"},{"binary_name":"python3-os-brick","binary_version":"3.0.8-0ubuntu1.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"ironic","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/ironic@1:15.0.0-0ubuntu0.20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:13.0.1-0ubuntu1","1:14.0.0~b1~git2019121713.76597ca93-0ubuntu1","1:14.0.0~b1~git2019121713.76597ca93-0ubuntu2","1:14.0.0-0ubuntu1","1:14.0.1~git2020032415.de2d907fc-0ubuntu1","1:14.0.1~git2020041013.af9e6ba90-0ubuntu2","1:15.0.0-0ubuntu0.20.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"ironic-api","binary_version":"1:15.0.0-0ubuntu0.20.04.1"},{"binary_name":"ironic-common","binary_version":"1:15.0.0-0ubuntu0.20.04.1"},{"binary_name":"ironic-conductor","binary_version":"1:15.0.0-0ubuntu0.20.04.1"},{"binary_name":"python3-ironic","binary_version":"1:15.0.0-0ubuntu0.20.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"cinder","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/cinder@2:20.2.0-0ubuntu1.1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.1"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.1.0-0ubuntu2.1","2:20.1.0-0ubuntu2.2","2:20.2.0-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"cinder-api","binary_version":"2:20.2.0-0ubuntu1.1"},{"binary_name":"cinder-backup","binary_version":"2:20.2.0-0ubuntu1.1"},{"binary_name":"cinder-common","binary_version":"2:20.2.0-0ubuntu1.1"},{"binary_version":"2:20.2.0-0ubuntu1.1","binary_name":"cinder-scheduler"},{"binary_name":"cinder-volume","binary_version":"2:20.2.0-0ubuntu1.1"},{"binary_version":"2:20.2.0-0ubuntu1.1","binary_name":"python3-cinder"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"ironic","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ironic@1:20.1.0-0ubuntu1.1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.1.0-0ubuntu1.1"}]}],"versions":["1:18.2.0-0ubuntu1","1:18.2.0+git2021120910.cdc3b9538-0ubuntu1","1:19.0.0+git2022011216.7beadee46-0ubuntu1","1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1","1:20.1.0-0ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ironic-api","binary_version":"1:20.1.0-0ubuntu1.1"},{"binary_name":"ironic-common","binary_version":"1:20.1.0-0ubuntu1.1"},{"binary_name":"ironic-conductor","binary_version":"1:20.1.0-0ubuntu1.1"},{"binary_name":"python3-ironic","binary_version":"1:20.1.0-0ubuntu1.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"nova","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/nova@3:25.1.1-0ubuntu1.1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:25.1.1-0ubuntu1.1"}]}],"versions":["3:24.0.0-0ubuntu1","3:24.0.0+git2022030310.3f274c65cc-0ubuntu2","3:25.0.0-0ubuntu1","3:25.0.0-0ubuntu1.1","3:25.0.1-0ubuntu1","3:25.1.0-0ubuntu1","3:25.1.0-0ubuntu2","3:25.1.0-0ubuntu2.1","3:25.1.0-0ubuntu2.2","3:25.1.1-0ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"nova-ajax-console-proxy","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-api","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-api-metadata","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-api-os-compute","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-api-os-volume","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-cells","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-common","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute-ironic","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute-kvm","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute-libvirt","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute-lxc","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_version":"3:25.1.1-0ubuntu1.1","binary_name":"nova-compute-qemu"},{"binary_name":"nova-compute-vmware","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-compute-xen","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-conductor","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-novncproxy","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-scheduler","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-serialproxy","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-spiceproxy","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_name":"nova-volume","binary_version":"3:25.1.1-0ubuntu1.1"},{"binary_version":"3:25.1.1-0ubuntu1.1","binary_name":"python3-nova"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-glance-store","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/python-glance-store@3.0.0-0ubuntu1.3?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-0ubuntu1.3"}]}],"versions":["2.7.0-0ubuntu1","3.0.0-0ubuntu1","3.0.0-0ubuntu1.1","3.0.0-0ubuntu1.2"],"ecosystem_specific":{"binaries":[{"binary_version":"3.0.0-0ubuntu1.3","binary_name":"python3-glance-store"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}},{"package":{"name":"python-os-brick","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/python-os-brick@5.2.2-0ubuntu1.2?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-0ubuntu1.2"}]}],"versions":["5.0.1-0ubuntu1","5.1.0-0ubuntu1","5.2.0-0ubuntu1","5.2.2-0ubuntu1","5.2.2-0ubuntu1.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"os-brick-common","binary_version":"5.2.2-0ubuntu1.2"},{"binary_name":"python3-os-brick","binary_version":"5.2.2-0ubuntu1.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-2088.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}