Skip to content
OpenAdvisories
Unscored RHSA-2014:0940 1 CVE

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-api 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-cells 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-cert 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-common 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-compute 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-conductor 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-console 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-doc 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-network 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-novncproxy 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-objectstore 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-scheduler 0:2014.1.1-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-nova 0:2014.1.1-4.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2014-3517

    OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1085852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1100358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1112499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1114637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1115375
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1117895
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0940.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3517
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3517