UBUNTU-CVE-2014-2573

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2014-2573

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-2573.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2014-2573

Upstream

CVE-2014-2573

Withdrawn

2025-07-18T16:43:00Z

Published

2014-03-25T16:55:00Z

Modified

2025-07-16T07:31:52.687028Z

Severity

Ubuntu - negligible

Summary

[none]

Details

The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.

References

Affected packages

Ubuntu:14.04:LTS / nova

Package

Name: nova
Purl: pkg:deb/ubuntu/nova@1:2014.1.1-0ubuntu1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2014.1.1-0ubuntu1

Affected versions

1:2013.*

1:2013.2~rc2-0ubuntu1

1:2013.2-0ubuntu1

1:2014.*

1:2014.1~b1-0ubuntu1

1:2014.1~b1-0ubuntu2

1:2014.1~b2-0ubuntu3

1:2014.1~b2-0ubuntu4

1:2014.1~b3-0ubuntu1

1:2014.1~b3-0ubuntu2

1:2014.1~rc1-0ubuntu1

1:2014.1~rc2-0ubuntu1

1:2014.1-0ubuntu1

1:2014.1-0ubuntu1.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "nova-ajax-console-proxy",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-api",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-api-ec2",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-api-metadata",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-api-os-compute",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-api-os-volume",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-baremetal",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-cells",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-cert",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-common",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-kvm",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-libvirt",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-lxc",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-qemu",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-vmware",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-compute-xen",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-conductor",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-console",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-consoleauth",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-doc",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-network",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-novncproxy",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-objectstore",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-scheduler",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-spiceproxy",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-volume",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "nova-xvpvncproxy",
            "binary_version": "1:2014.1.1-0ubuntu1"
        },
        {
            "binary_name": "python-nova",
            "binary_version": "1:2014.1.1-0ubuntu1"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-2573.json"