suse · CVE-2014-3708

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-3708 severity low: SUSE including 28 source package names (openstack-nova-12.0.2~a0~dev18-1.3, openstack-nova-2014.1.4.dev49-0.7.1, …), 28 product×package rows across 2 product lines (SUSE OpenStack Cloud 4, SUSE OpenStack Cloud 6): Fixed 28.

Description:

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.