CVE-2014-8333
OpenStack Nova VMware instance leak potentially leading to compute DoS
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
Exploit likelihood
What each source reports
NVD Score used
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
CVE-2014-8333- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
CVE-2014-8333- Updated
- 2026-11-02
EUVDEUVD-2022-3899 No score
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
EUVD-2022-3899- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g63p-mfcm-54c4 No score
OpenStack Nova VMware instance leak potentially leading to compute DoS
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
GHSA-g63p-mfcm-54c4- Updated
- 2026-11-02
OSV No score
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
CVE-2014-8333- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-8333 No score
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
DEBIAN-CVE-2014-8333- Updated
- 2026-11-02
OSVGHSA-g63p-mfcm-54c4 No score
OpenStack Nova VMware instance leak potentially leading to compute DoS
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
GHSA-g63p-mfcm-54c4- Updated
- 2026-11-02
OSVPYSEC-2026-872 No score
OpenStack Nova VMware instance leak potentially leading to compute DoS
The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.
- Record
PYSEC-2026-872- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
novaPyPI |
before 12.0.0a0 | 12.0.0a0 |
novaDebian:12 |
before 2014.1.3-7 | 2014.1.3-7 |
novaDebian:13 |
before 2014.1.3-7 | 2014.1.3-7 |
novaDebian:14 |
before 2014.1.3-7 | 2014.1.3-7 |
openstack-novaRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-apiRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-cellsRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-certRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-commonRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-computeRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-nova-conductorRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-consoleRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-docRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-networkRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-novncproxyRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-objectstoreRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-schedulerRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-nova-serialproxyRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
python-novaRed Hat:openstack:5::el7 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el7ost | 0:2014.1.4-3.el7ost |
openstack-novaRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-apiRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-cellsRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-certRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-commonRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-computeRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-conductorRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-consoleRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-docRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-networkRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-novncproxyRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-objectstoreRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-schedulerRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
openstack-nova-serialproxyRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
python-novaRed Hat:openstack:5::el6 From an advisory covering 3 CVEs |
before 0:2014.1.4-3.el6ost | 0:2014.1.4-3.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8333 is a medium vulnerability (CVSS 4.0) in Openstack Nova, published October 31, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.02%, the 81st percentile. Fixed in nova 12.0.0a0.
References
secunia.com/advisories/60531
bugs.launchpad.net/nova/+bug/1359138
rhn.redhat.com/errata/RHSA-2015-0844.html
lists.openstack.org/pipermail/openstack-announce/2014-October/000298.html
nvd.nist.gov/vuln/detail/CVE-2014-8333
Show 34 moreShow less
github.com/openstack/nova/commit/d71445c7d2d2921d10a08f82330f0ab8ef4f7df2
security-tracker.debian.org/tracker/CVE-2014-8333
pypi.org/project/nova
access.redhat.com/errata/RHSA-2015:0843
bugzilla.redhat.com/show_bug.cgi?id=1141518
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0843.json
cve.org/CVERecord?id=CVE-2014-3708