CVE-2014-3517 OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Remote attackers can brute-force instance ID signatures via timing differences in metadata requests, potentially exposing sensitive instance information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-3517?
CVE-2014-3517 is a medium-severity vulnerability in n/a, published on 7 Aug 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
Weakness: CWE-200
Which versions are affected by CVE-2014-3517?
5 open source packages ship an affected version, including nova. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nova PyPI | All versions | 2013.2.4, 2014.1.2 |
nova PyPI | All versions | 2013.2.4 |
nova PyPI | All versions | 2013.2.4 |
nova PyPI | From 2014.0.0 | 2014.1.2 |
nova PyPI | From 2014.0.0 | 2014.1.2 |
Linux distribution packages (14)
openstack-nova Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-api Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-cells Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-cert Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-common Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-compute Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-conductor Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-console Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-doc Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-network Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-novncproxy Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-objectstore Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
openstack-nova-scheduler Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
python-nova Red Hat:openstack:5::el7 | All versions | 0:2014.1.1-4.el7ost |
Products include Openstack Nova.
How do I fix CVE-2014-3517?
Upgrade nova to a fixed version for your release line: 2013.2.4 or 2014.1.2.
Is CVE-2014-3517 being exploited?
There is no known exploitation of CVE-2014-3517 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-7214 OpenStack Nova logs sensitive context from notification exceptions
- CVE-2017-17051 OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
- CVE-2020-17376 OpenStack Nova Live migration fails to update persistent domain XML
- CVE-2017-18191 OpenStack Nova Denial of service attack on the compute host
- CVE-2015-3280 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
Sources
Also known as DEBIAN-CVE-2014-3517, GHSA-xjmj-p278-4jp5, PYSEC-2026-884, RHSA-2014:0940, UBUNTU-CVE-2014-3517, USN-2325-1.