OpenStack Nova VMWare driver leaks rescued images

2022-05-1704:48:26

GitHub Advisory Database

github.com

openstack

nova

vmware

driver

vulnerability

rescue status

quota limit

denial of service

remote authenticated users

resource consumption

CVSS2

2.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:S/C:N/I:N/A:P

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

69.2%

JSON

The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.