CVE-2014-2573
2 advisories.
PyPI/nova CVE-2014-2573: medium 6.5
OpenStack Nova VMWare driver leaks rescued images
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: GHSA-jv34-xvjq-ppch
- https://nvd.nist.gov/vuln/detail/CVE-2014-2573
- https://github.com/openstack/nova/commit/b3cc3f62a60662e5bb82136c0cfa464592a6afe9
- https://github.com/openstack/nova/commit/efb66531bc37ee416778a70d46c657608ca767af
- https://bugs.launchpad.net/nova/+bug/1269418
- https://github.com/openstack/nova
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-113.yaml
- http://www.openwall.com/lists/oss-security/2014/03/21/1
- http://www.openwall.com/lists/oss-security/2014/03/21/2
CVE-2014-2573 · published · modified · JSON
PyPI/nova CVE-2014-2573: unknown
The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: PYSEC-2014-113
- http://www.openwall.com/lists/oss-security/2014/03/21/1
- http://www.openwall.com/lists/oss-security/2014/03/21/2
- https://bugs.launchpad.net/nova/+bug/1269418
- http://secunia.com/advisories/57498
CVE-2014-2573 · published · modified · JSON