affected:
- package:
    ecosystem: PyPI
    name: nova
    purl: pkg:pypi/nova
  ranges:
  - events:
    - introduced: '0'
    - fixed: 12.0.0a0
    type: ECOSYSTEM
aliases:
- CVE-2014-2573
- GHSA-jv34-xvjq-ppch
details: The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does
  not properly put VMs into RESCUE status, which allows remote authenticated users
  to bypass the quota limit and cause a denial of service (resource consumption) by
  requesting the VM be put into rescue and then deleting the image.
id: PYSEC-2014-113
modified: '2024-11-25T18:35:18.357593Z'
published: '2014-03-25T16:55:00Z'
references:
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2014/03/21/1
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2014/03/21/2
- type: WEB
  url: https://bugs.launchpad.net/nova/+bug/1269418
- type: ADVISORY
  url: http://secunia.com/advisories/57498