Vulnerability in Openstack Nova

CVE-2014-3708

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

EPSS: 0.011 (78.0th percentile) — read the EPSS interpretation.

Affected products

Openstack Nova
Redhat Openstack — versions 5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

70777 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
RHSA-2015:0844 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
RHSA-2015:0843 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)
[openstack-announce] 20141028 [OSSA 2014-038] Nova network DoS through API filtering (CVE-2014-3708) (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)