Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2014-2573

Good to know:

icon

Date: March 25, 2014

The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.

Language: Python

Severity Score

Related Resources (9)

http://www.openwall.com/lists/oss-security/2014/03/21/1
https://github.com/openstack/nova/commit/efb66531bc37ee416778a70d46c657608ca767af
http://secunia.com/advisories/57498
https://github.com/openstack/nova/commit/b3cc3f62a60662e5bb82136c0cfa464592a6afe9
https://bugs.launchpad.net/nova/+bug/1269418
https://github.com/openstack/nova
https://nvd.nist.gov/vuln/detail/CVE-2014-2573
http://www.openwall.com/lists/oss-security/2014/03/21/2
https://www.mend.io/vulnerability-database/CVE-2014-2573

Severity Score

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Top Fix

icon

Upgrade Version

Upgrade to version 2013.2.4

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): ADJACENT
Access Complexity (AC): MEDIUM
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us