NVD

Id
31773  
Name
CVE-2014-3608  
Description
The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.  
Reject
 
CVSS Version
2  
CVSS Score
2.7  
Severity
Low  
CVSS Base Score
2.7  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
5.1  
CVSS Vector
(AV:A/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-10-06  
Modified Date
2016-11-28  
Seq
2014-3608  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167410 31773 CVE-2014-3608 RHSA-2014:1781  View
167411 31773 CVE-2014-3608 RHSA-2014:1782  View
167412 31773 CVE-2014-3608 [oss-security] 20141002 [OSSA 2014-032] Nova VMware driver still leaks rescued images (CVE-2014-3608)  View
167413 31773 CVE-2014-3608 70220  View
167414 31773 CVE-2014-3608 https://bugs.launchpad.net/nova/+bug/1338830  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15683 JVNDB-2014-004558 OpenStack Compute の VMWare ドライバにおけるクォータ制限を回避される脆弱性 OpenStack Compute (Nova) の VMWare ドライバには、クォータ制限を回避され、サービス運用妨害 (リソース消費) 状態にされる脆弱性が存在します。 CVE-2014-3608 70896 CVE-2014-3608 31773 2.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004558.html 2014-10-02 2014-12-02 View