CVE-2014-3517
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
Exploit likelihood
What each source reports
NVD Score used
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
CVE-2014-3517- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
CVE-2014-3517- Updated
- 2026-11-02
EUVDEUVD-2022-5812 No score
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
EUVD-2022-5812- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xjmj-p278-4jp5 No score
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
GHSA-xjmj-p278-4jp5- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
CVE-2014-3517- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-3517 No score
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
DEBIAN-CVE-2014-3517- Updated
- 2026-11-02
Show 4 moreShow less
OSVGHSA-xjmj-p278-4jp5 No score
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
GHSA-xjmj-p278-4jp5- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVPYSEC-2026-884 No score
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
PYSEC-2026-884- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3517 No score
api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
- Record
UBUNTU-CVE-2014-3517- Updated
- 2026-11-02
OSVUSN-2325-1 No score
nova vulnerability
Alex Gaynor discovered that OpenStack Nova would sometimes respond with variable times when comparing authentication tokens. If nova were configured to proxy metadata requests via Neutron, a remote authenticated attacker could exploit this to conduct timing attacks and ascertain configuration details of another instance.
- Record
USN-2325-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
novaPyPI |
before 2013.2.4 | 2013.2.4 |
novaPyPI |
2014.0.0 up to 2014.1.2 | 2014.1.2 |
novaDebian:12 |
before 2014.1.1-8 | 2014.1.1-8 |
novaDebian:13 |
before 2014.1.1-8 | 2014.1.1-8 |
novaDebian:14 |
before 2014.1.1-8 | 2014.1.1-8 |
novaPyPI |
before 2013.2.4, plus listed versions 15.1.516.1.616.1.716.1.817.0.10 Show 45 moreShow less17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0 |
2013.2.4 |
novaPyPI |
before 2013.2.4, 2014.0.0 up to 2014.1.2, plus listed versions 15.1.516.1.616.1.716.1.817.0.10 Show 45 moreShow less17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0 |
2013.2.42014.1.2 |
openstack-novaRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-apiRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-cellsRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-nova-certRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-commonRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-computeRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-conductorRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-consoleRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-docRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-networkRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-novncproxyRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-objectstoreRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-nova-schedulerRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
python-novaRed Hat:openstack:5::el7 |
before 0:2014.1.1-4.el7ost | 0:2014.1.1-4.el7ost |
openstack-novaRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-apiRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-cellsRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-certRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-commonRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-computeRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-conductorRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-consoleRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-docRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-networkRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-novncproxyRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-objectstoreRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
openstack-nova-schedulerRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
python-novaRed Hat:openstack:4::el6 From an advisory covering 2 CVEs |
before 0:2013.2.3-12.el6ost | 0:2013.2.3-12.el6ost |
novaUbuntu:14.04:LTS |
before 1:2014.1.2-0ubuntu1.1, plus listed versions 1:2013.2~rc2-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b1-0ubuntu21:2014.1~b2-0ubuntu3 Show 10 moreShow less1:2014.1~b2-0ubuntu41:2014.1~b3-0ubuntu11:2014.1~b3-0ubuntu21:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1-0ubuntu11:2014.1-0ubuntu1.21:2014.1.1-0ubuntu11:2014.1.1-0ubuntu21:2014.1.2-0ubuntu1 |
1:2014.1.2-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3517 is a medium vulnerability (CVSS 4.3) in Openstack Nova, published August 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.95%, the 80th percentile. Fixed in nova 2013.2.4.
References
openwall.com/lists/oss-security/2014/07/17/2
bugs.launchpad.net/nova/+bug/1325128
nvd.nist.gov/vuln/detail/CVE-2014-3517
access.redhat.com/errata/RHSA-2014:0940
Show 31 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1112499
github.com/advisories/GHSA-xjmj-p278-4jp5
security-tracker.debian.org/tracker/CVE-2014-3517
opendev.org/openstack/nova
pypi.org/project/nova
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0940.json
cve.org/CVERecord?id=CVE-2014-3517
ubuntu.com/security/CVE-2014-3517
lists.openstack.org/pipermail/openstack-announce/2014-July/000253.html
Left out here: 186 versions. The JSON record has them.