CVE-2014-3608

Name of the Vulnerable Software and Affected Versions OpenStack Compute (Nova) versions prior to 2014.1.3

Description The issue allows remote authenticated users to bypass the quota limit and cause a denial of service by consuming resources. This is achieved by putting a virtual machine into the rescue state, suspending it, which results in an ERROR state, and then deleting the image. The problem exists due to an incomplete fix for a previous issue.

Recommendations For versions prior to 2014.1.3, update to version 2014.1.3 or later to resolve the issue.