CVE-2014-2573 OpenStack Nova VMWare driver leaks rescued images
Authenticated users can bypass quota limits and cause denial of service by exploiting a flaw in the VM rescue status handling within the VMware driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-2573?
CVE-2014-2573 is a low-severity vulnerability in n/a, published on 25 Mar 2014. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.
Weakness: CWE-264
Which versions are affected by CVE-2014-2573?
3 open source packages ship an affected version, including nova. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nova PyPI | All versions | 12.0.0a0 |
nova PyPI | All versions | 12.0.0a0 |
nova PyPI | All versions | 12.0.0a0 |
Products include Openstack Compute.
How do I fix CVE-2014-2573?
Upgrade nova to 12.0.0a0 or later.
Is CVE-2014-2573 being exploited?
There is no known exploitation of CVE-2014-2573 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2013-7130 OpenStack Nova Live migration can leak root disk into ephemeral storage
- CVE-2014-0167 OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
- CVE-2015-2687 OpenStack Compute (Nova) Improper Access Control
- CVE-2013-4179 OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
- CVE-2012-2654 OpenStack Compute (Nova) Improper Input Validation
Sources
Also known as DEBIAN-CVE-2014-2573, GHSA-jv34-xvjq-ppch, PYSEC-2014-113.