The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2014-10-06T14:00:00
Updated: 2024-08-06T10:50:17.772Z
Reserved: 2014-05-14T00:00:00
Link: CVE-2014-3608
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-10-06T14:55:09.737
Modified: 2024-11-21T02:08:29.670
Link: CVE-2014-3608
Redhat