CVE-2014-2573

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.70%

Published

Mar 25, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.

Weaknesses (CWE)

CWE-264

Affected Products (3)

openstack · computevulnerable

References (8)

http://secunia.com/advisories/57498

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/03/21/1

http://www.openwall.com/lists/oss-security/2014/03/21/2

https://bugs.launchpad.net/nova/+bug/1269418

http://secunia.com/advisories/57498

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/03/21/1

http://www.openwall.com/lists/oss-security/2014/03/21/2

https://bugs.launchpad.net/nova/+bug/1269418

KEV Catalog EPSS Scores Vendors All CVEs