Veracode Vulnerability DatabaseVERACODE:11498Denial Of Service (DoS)
2.7 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:N/I:N/A:P
openstack-nova is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.
References
rhn.redhat.com/errata/RHSA-2014-1781.html
rhn.redhat.com/errata/RHSA-2014-1782.html
seclists.org/oss-sec/2014/q4/65
www.securityfocus.com/bid/70220
access.redhat.com/errata/RHSA-2014:1781
access.redhat.com/errata/RHSA-2014:1782
access.redhat.com/security/cve/CVE-2014-3608
access.redhat.com/security/updates/classification/#important
bugs.launchpad.net/nova/+bug/1338830
bugzilla.redhat.com/show_bug.cgi?id=1148253
bugzilla.redhat.com/show_bug.cgi?id=1149749
rhn.redhat.com/errata/RHSA-2014-1781.html
Related
2.7 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:N/I:N/A:P