Vulnerability in Openstack Nova

CVE-2014-3708

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.

Affected products

Openstack Nova
Redhat Openstack — versions 5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)
secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)