CVE-2014-3708
CVE-2014-3708
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.
EPSS 2.8% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nova Debian:12
- Affected ranges
- ECOSYSTEM: < 2014.1.3-6
Update to 2014.1.3-6
nova Debian:13
- Affected ranges
- ECOSYSTEM: < 2014.1.3-6
Update to 2014.1.3-6
nova Debian:14
- Affected ranges
- ECOSYSTEM: < 2014.1.3-6
Update to 2014.1.3-6
nova PyPI
- Versions
- 15.1.5
- 16.1.6
- 16.1.7
- 16.1.8
- 17.0.10
- 17.0.11
- 17.0.12
- 17.0.13
- 17.0.7
- 17.0.8
- 17.0.9
- 18.0.2
- 18.0.3
- 18.1.0
- 18.2.0
- 18.2.1
- 18.2.2
- 18.2.3
- 18.3.0
- 19.0.0
- 19.0.0.0rc1
- 19.0.0.0rc2
- 19.0.1
- 19.0.2
- 19.0.3
- 19.1.0
- 19.2.0
- 19.3.0
- 19.3.1
- 19.3.2
- 20.0.0
- 20.0.0.0rc1
- 20.0.0.0rc2
- 20.0.1
- 20.1.0
- 20.1.1
- 20.2.0
- 20.3.0
- 20.4.0
- 20.4.1
- 20.5.0
- 20.6.0
- 20.6.1
- 21.0.0
- 21.0.0.0rc1
- 21.0.0.0rc2
- 21.1.0
- 21.1.1
- 21.1.2
- 21.2.0
- 21.2.1
- 21.2.2
- 21.2.3
- 21.2.4
- 22.0.0
- 22.0.0.0rc1
- 22.0.1
- 22.1.0
- 22.2.0
- 22.2.1
- 22.2.2
- 22.3.0
- 22.4.0
- 23.0.0
- 23.0.0.0rc1
- 23.0.0.0rc2
- 23.0.1
- 23.0.2
- 23.1.0
- 23.2.0
- 23.2.1
- 23.2.2
- 24.0.0
- 24.0.0.0rc1
- 24.0.0.0rc2
- 24.1.0
- 24.1.1
- 24.2.0
- 24.2.1
- 25.0.0
- 25.0.0.0rc1
- 25.0.1
- 25.1.0
- 25.1.1
- 25.2.0
- 25.2.1
- 25.3.0
- 26.0.0
- 26.0.0.0rc1
- 26.0.0.0rc2
- 26.1.0
- 26.1.1
- 26.2.0
- 26.2.1
- 26.2.2
- 26.3.0
- 27.0.0
- 27.0.0.0rc1
- 27.1.0
- 27.2.0
- 27.3.0
- 27.4.0
- 27.5.0
- 27.5.1
- 28.0.0
- 28.0.0.0rc1
- 28.0.1
- 28.1.0
- 28.2.0
- 28.3.0
- 28.3.1
- 29.0.0
- 29.0.0.0rc1
- 29.0.1
- 29.0.2
- 29.1.0
- 29.2.0
- 29.2.1
- 29.2.2
- 29.3.0
- 29.4.0
- 30.0.0
- 30.0.0.0rc1
- 30.1.0
- 30.2.0
- 30.2.1
- 30.3.0
- 31.0.0
- 31.0.0.0rc1
- 31.0.1
- 31.1.0
- 31.2.0
- 31.3.0
- 31.3.1
- 32.0.0
- 32.0.0.0rc1
- 32.1.0
- 32.2.0
- 32.2.1
- 33.0.0
- 33.0.0.0rc1
- 33.0.1
- 33.0.2
- Affected ranges
- ECOSYSTEM: < 2014.1.4
Update to 2014.1.4
nova PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2014.2.0, < 2014.2.1
Update to 2014.2.1
nova PyPI
- Versions
- 15.1.5
- 16.1.6
- 16.1.7
- 16.1.8
- 17.0.10
- 17.0.11
- 17.0.12
- 17.0.13
- 17.0.7
- 17.0.8
- 17.0.9
- 18.0.2
- 18.0.3
- 18.1.0
- 18.2.0
- 18.2.1
- 18.2.2
- 18.2.3
- 18.3.0
- 19.0.0
- 19.0.0.0rc1
- 19.0.0.0rc2
- 19.0.1
- 19.0.2
- 19.0.3
- 19.1.0
- 19.2.0
- 19.3.0
- 19.3.1
- 19.3.2
- 20.0.0
- 20.0.0.0rc1
- 20.0.0.0rc2
- 20.0.1
- 20.1.0
- 20.1.1
- 20.2.0
- 20.3.0
- 20.4.0
- 20.4.1
- 20.5.0
- 20.6.0
- 20.6.1
- 21.0.0
- 21.0.0.0rc1
- 21.0.0.0rc2
- 21.1.0
- 21.1.1
- 21.1.2
- 21.2.0
- 21.2.1
- 21.2.2
- 21.2.3
- 21.2.4
- 22.0.0
- 22.0.0.0rc1
- 22.0.1
- 22.1.0
- 22.2.0
- 22.2.1
- 22.2.2
- 22.3.0
- 22.4.0
- 23.0.0
- 23.0.0.0rc1
- 23.0.0.0rc2
- 23.0.1
- 23.0.2
- 23.1.0
- 23.2.0
- 23.2.1
- 23.2.2
- 24.0.0
- 24.0.0.0rc1
- 24.0.0.0rc2
- 24.1.0
- 24.1.1
- 24.2.0
- 24.2.1
- 25.0.0
- 25.0.0.0rc1
- 25.0.1
- 25.1.0
- 25.1.1
- 25.2.0
- 25.2.1
- 25.3.0
- 26.0.0
- 26.0.0.0rc1
- 26.0.0.0rc2
- 26.1.0
- 26.1.1
- 26.2.0
- 26.2.1
- 26.2.2
- 26.3.0
- 27.0.0
- 27.0.0.0rc1
- 27.1.0
- 27.2.0
- 27.3.0
- 27.4.0
- 27.5.0
- 27.5.1
- 28.0.0
- 28.0.0.0rc1
- 28.0.1
- 28.1.0
- 28.2.0
- 28.3.0
- 28.3.1
- 29.0.0
- 29.0.0.0rc1
- 29.0.1
- 29.0.2
- 29.1.0
- 29.2.0
- 29.2.1
- 29.2.2
- 29.3.0
- 29.4.0
- 30.0.0
- 30.0.0.0rc1
- 30.1.0
- 30.2.0
- 30.2.1
- 30.3.0
- 31.0.0
- 31.0.0.0rc1
- 31.0.1
- 31.1.0
- 31.2.0
- 31.3.0
- 31.3.1
- 32.0.0
- 32.0.0.0rc1
- 32.1.0
- 32.2.0
- 32.2.1
- 33.0.0
- 33.0.0.0rc1
- 33.0.1
- 33.0.2
- Affected ranges
- ECOSYSTEM: < 2014.1.4 ∪ ≥ 2014.2.0, < 2014.2.1
Update to 2014.1.4; Update to 2014.2.1
Original sources
- http://www.securityfocus.com/bid/70777
- http://rhn.redhat.com/errata/RHSA-2015-0844.html
- http://rhn.redhat.com/errata/RHSA-2015-0843.html
- https://bugs.launchpad.net/nova/+bug/1358583
- http://lists.openstack.org/pipermail/openstack-announce/2014-October/000301.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-3708