CVE-2014-8333

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-31 · updated 2026-06-17
Weakness: CWE-399

Description

The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.

Affected products

OpenStack Nova: from 2014.1 before 2014.1.4 — fixed in 2014.1.4
OpenStack: 5.0

How to fix

Upgrade to a fixed version: OpenStack Nova 2014.1.4. Check the vendor advisory for mitigations.

References

http://lists.openstack.org/pipermail/openstack-announce/2014-October/000298.html
http://rhn.redhat.com/errata/RHSA-2015-0843.html
http://rhn.redhat.com/errata/RHSA-2015-0844.html
http://secunia.com/advisories/60531
https://bugs.launchpad.net/nova/+bug/1359138
http://lists.openstack.org/pipermail/openstack-announce/2014-October/000298.html
http://rhn.redhat.com/errata/RHSA-2015-0843.html
http://rhn.redhat.com/errata/RHSA-2015-0844.html
http://secunia.com/advisories/60531
https://bugs.launchpad.net/nova/+bug/1359138

Get alerted when CVE-2014-8333 or the next vulnerability affects your stack