CVE-2014-2573

CVE-2014-2573

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.

CVSS 6.5 · Medium · EPSS 0.7% · Fix available

Published

2014-03-25T15:00:00.000Z

Updated

2024-08-06T10:21:35.993Z

Stack: system · python

Check your server →