CVE-2014-3608 – nova

Package

Manager: pip
Name: nova
Vulnerable Version: >=0 <2014.1.3

Severity

Level: Medium

CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:R

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS: 0.00689 pctl0.70856

Details

OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.

Metadata

Created: 2022-05-14T01:58:45Z
Modified: 2023-02-08T19:54:42Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-92hc-c226-32q7/GHSA-92hc-c226-32q7.json
CWE IDs: []
Alternative ID: GHSA-92hc-c226-32q7
Finding: F002
Auto approve: 1