https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:41:29.129615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-3608 CVE-2014-3608 2026-10-05T05:41:29.166028+00:00

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.

 https://cve.radiocsirt.org/vuln/usn-2407-1 USN-2407-1 — nova vulnerabilities 2026-10-05T05:41:29.166084+00:00

Affected: Ubuntu:14.04:LTS: nova

Garth Mollett discovered that OpenStack Nova did not properly clean up an instance when using rescue mode with the VMWare driver. A remove authenticated user could exploit this to bypass intended quota limits. By default, Ubuntu does not use the VMWare driver. (CVE-2014-3608)

Amrith Kumar discovered that OpenStack Nova did not properly sanitize log message contents. Under certain circumstances, a local attacker with read access to Nova log files could obtain access to sensitive information. (CVE-2014-7230)