VulnerabilityModified

CVE-2014-8750

Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be allocated to two…

MEDIUM 6.5EPSS 2.03%

Does this matter?

Lower severity and a low EPSS score (2.03%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 2.03% probability · 80th percentile
CISA KEV: Not listed
Weakness: CWE-362
Affected: openstack/nova
Source: cve@mitre.org

References

http://lists.openstack.org/pipermail/openstack-announce/2014-October/000293.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1689.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1781.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1782.htmlThird Party Advisory
http://secunia.com/advisories/60227Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/14/9Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/70182Third Party Advisory, VDB Entry
https://bugs.launchpad.net/nova/+bug/1357372Third Party Advisory
http://lists.openstack.org/pipermail/openstack-announce/2014-October/000293.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1689.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1781.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1782.htmlThird Party Advisory
http://secunia.com/advisories/60227Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/14/9Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/70182Third Party Advisory, VDB Entry
https://bugs.launchpad.net/nova/+bug/1357372Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.