CVE-2014-3708: OpenStack Compute (Nova) Denial of Service… – CVSS 4.0 · Watchpost

← All vulnerabilities

OpenStack Compute (Nova) Denial of Service vulnerability

MEDIUM 4.0CVE-2014-3708 · GHSA-43hc-pwvx-pmfg · PYSEC-2026-863 · Published 31/10/2014 · updated 17/06/2026

In short

CVE-2014-3708 is a MEDIUM (CVSS 4.0) vulnerability affecting nova, nova (openstack), openstack (redhat).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.5% of all vulnerabilities.
Fix: update to 2014.2.1, 2014.1.4 or later.

Package	Affected versions	Patched versions
nova PyPI	`≥ 2014.2.0, < 2014.2.1< 2014.1.4`	`2014.2.12014.1.4`
nova openstack	`≥ 2014.1, < 2014.1.4≥ 2014.2, < 2014.2.1`	`2014.1.42014.2.1`
openstack redhat	`= 5.0`	No fix yet

Description

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

NVD description

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

References

nvd.nist.gov/vuln/detail/CVE-2014-3708 · ADVISORY
access.redhat.com/errata/RHSA-2015:0843 · WEB
access.redhat.com/errata/RHSA-2015:0844 · WEB
access.redhat.com/security/cve/CVE-2014-3708 · WEB
bugs.launchpad.net/nova/+bug/1358583 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
opendev.org/openstack/nova · PACKAGE
web.archive.org/web/20200901000000*/http://www.securityfocus.com/bid/70777 · WEB
lists.openstack.org/pipermail/openstack-announce/2014-October/000301.html · WEB
rhn.redhat.com/errata/RHSA-2015-0843.html · WEB
rhn.redhat.com/errata/RHSA-2015-0844.html · WEB
securityfocus.com/bid/70777 · WEB

More vulnerabilities in nova

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free