Skip to content
OpenAdvisories
Unscored RHSA-2014:1782 4 CVEs

Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-api 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-cells 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-cert 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-common 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-compute 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-conductor 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-console 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-doc 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-network 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-novncproxy 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-objectstore 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-nova-scheduler 0:2014.1.3-4.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-nova 0:2014.1.3-4.el7ost

Vulnerabilities 4

  • Medium —
    CVE-2014-3608

    OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service

    The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR sta…

    nova nova nova Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-7230

    The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 befor…

    nova nova cinder cinder Debian Ubuntu
  • Low —
    CVE-2014-7231

    OpenStack Oslo utility sensitive information exposure via log files

    The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the l…

    python-oslo.utils oslo-utils Debian PyPI
  • Unscored —
    CVE-2014-8750

    Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remo…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1141972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1149737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152346
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1782.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3608
  • report
    https://access.redhat.com/security/cve/CVE-2014-7230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1147722
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7230
  • report
    https://access.redhat.com/security/cve/CVE-2014-7231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7231
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7231
  • report
    https://access.redhat.com/security/cve/CVE-2014-8750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8750