Read the docs
Red Hat Security Advisory

RHSA-2014:1781

openstack-nova security, bug fix, and enhancement update

Released 2014-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-07179 CVE-2014-8750 · GHSA-2pcw-fgm2-4xh2

Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and…

Priority LOW 33

Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same V…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02027 Published 2014-10-15 Fixed CWE-362
TI-2014-02929 CVE-2014-3608 · GHSA-92hc-c226-32q7

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated…

Priority LOW 17

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, susp…

CVSS 2.0LOW 2.7 Adjacent network Low privileges Interaction — EPSS 0.01725 Published 2014-10-06 Partial fix · 2014.1.3 CWE-399
TI-2014-06020 CVE-2014-7231 · GHSA-v933-vx5p-j7w2

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova…

Priority LOW 12

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local use…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00532 Published 2014-10-08 Partial fix · 0.2.0 CWE-200