CVE-2014-3708
OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.
- EPSS
- 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:nova
- redhat:openstack
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-43hc-pwvx-pmfg | PyPI | nova | <2014.1.4 | 2014.1.4 |
| GHSA-43hc-pwvx-pmfg | PyPI | nova | >=2014.2.0 <2014.2.1 | 2014.2.1 |
| PYSEC-2026-863 | PyPI | nova | <2014.1.4 >=2014.2.0 <2014.2.1 | 2014.1.4, 2014.2.1 |