CVE-2013-0208: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.

Affected products

• Canonical Ubuntu Linux: version 11.10 only; version 12.04 only; version 12.10 only
• Openstack Essex: affected versions not specified
• Openstack Folsom: affected versions not specified

Published 2013-02-13. Last modified 2026-06-16.