{"id":"CVE-2014-8333","aliases":["DEBIAN-CVE-2014-8333","EUVD-2022-3899","GHSA-g63p-mfcm-54c4","PYSEC-2026-872","RHSA-2015:0843","RHSA-2015:0844"],"status":"published","title":"OpenStack Nova VMware instance leak potentially leading to compute DoS","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02022,"percentile":0.81103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2014-10-31T14:00:00Z","modified":"2026-10-23T15:47:25Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["12.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2014.1.3-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2014.1.3-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2014.1.3-7"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.3-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.3-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.3-7"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.4-3.el6ost"}]}],"bundled":3}],"products":[{"vendor":"openstack","product":"nova"},{"vendor":"redhat","product":"openstack"}],"references":[{"url":"http://secunia.com/advisories/60531","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Permissions Required","Third Party Advisory","advisory","report","web"]},{"url":"https://bugs.launchpad.net/nova/+bug/1359138","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0844.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://lists.openstack.org/pipermail/openstack-announce/2014-October/000298.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0843.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8333","tags":["advisory"]},{"url":"https://github.com/openstack/nova/commit/d71445c7d2d2921d10a08f82330f0ab8ef4f7df2","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/e1f8664c9fa83f77f5bb763ffcc3157905ed954c","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g63p-mfcm-54c4","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8333","tags":["advisory"]},{"url":"https://github.com/openstack/nova","tags":["package"]},{"url":"https://pypi.org/project/nova","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0843","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1189836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1205806","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0843.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8333","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0259","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0844","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1170558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180602","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0844.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-8333","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2014-10-31T14:00:00Z","modified":"2024-08-06T13:18:46.441Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2022-3899","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2014-10-31T14:00:00Z","modified":"2024-08-06T13:18:46Z","updated_at":"2026-11-03T01:56:52.443165Z"}],"ghsa":[{"id":"GHSA-g63p-mfcm-54c4","title":"OpenStack Nova VMware instance leak potentially leading to compute DoS","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2022-05-14T01:08:49Z","modified":"2024-05-14T21:14:04Z","updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2014-8333","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2014-10-31T14:55:07.907Z","modified":"2026-06-17T00:16:34.5Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:56.921017Z"}],"osv":[{"id":"CVE-2014-8333","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2014-10-31T14:55:07Z","modified":"2026-07-07T11:56:41.574287812Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-8333","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2014-10-31T14:55:07.907Z","modified":"2026-10-23T15:47:25.487823446Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"GHSA-g63p-mfcm-54c4","title":"OpenStack Nova VMware instance leak potentially leading to compute DoS","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2022-05-14T01:08:49Z","modified":"2026-07-07T11:56:41.574287812Z","updated_at":"2026-11-02T15:46:47.472172Z"},{"id":"PYSEC-2026-872","title":"OpenStack Nova VMware instance leak potentially leading to compute DoS","description":"The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.","status":"published","published":"2026-07-06T08:03:21.812593Z","modified":"2026-07-07T11:45:48.207644248Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2015:0843","title":"Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:27:28Z","modified":"2026-08-01T10:31:07.127659548Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:0844","title":"Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:27:23Z","modified":"2026-08-01T10:30:11.19155232Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}