CVE-2014-8750 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-8750 Interim 1 9 2023-05-17T00:49:59Z current 2021-05-30T13:24:20Z 2023-05-17T00:49:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-8750 Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be allocated to two different instances. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-February/001238.html E-Mail link for SUSE-SU-2015:0324-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE OpenStack Cloud 4 SUSE OpenStack Cloud 6 openstack-nova-12.0.2~a0~dev18-1.3 openstack-nova-2014.1.4.dev49-0.7.1 openstack-nova-api-12.0.2~a0~dev18-1.3 openstack-nova-api-2014.1.4.dev49-0.7.1 openstack-nova-cells-12.0.2~a0~dev18-1.3 openstack-nova-cells-2014.1.4.dev49-0.7.1 openstack-nova-cert-12.0.2~a0~dev18-1.3 openstack-nova-cert-2014.1.4.dev49-0.7.1 openstack-nova-compute-12.0.2~a0~dev18-1.3 openstack-nova-compute-2014.1.4.dev49-0.7.1 openstack-nova-conductor-12.0.2~a0~dev18-1.3 openstack-nova-conductor-2014.1.4.dev49-0.7.1 openstack-nova-console-12.0.2~a0~dev18-1.3 openstack-nova-console-2014.1.4.dev49-0.7.1 openstack-nova-consoleauth-12.0.2~a0~dev18-1.3 openstack-nova-consoleauth-2014.1.4.dev49-0.7.1 openstack-nova-doc-2014.1.4.dev49-0.7.1 openstack-nova-novncproxy-12.0.2~a0~dev18-1.3 openstack-nova-novncproxy-2014.1.4.dev49-0.7.1 openstack-nova-objectstore-12.0.2~a0~dev18-1.3 openstack-nova-objectstore-2014.1.4.dev49-0.7.1 openstack-nova-scheduler-12.0.2~a0~dev18-1.3 openstack-nova-scheduler-2014.1.4.dev49-0.7.1 openstack-nova-serialproxy-12.0.2~a0~dev18-1.3 openstack-nova-vncproxy-12.0.2~a0~dev18-1.3 openstack-nova-vncproxy-2014.1.4.dev49-0.7.1 python-nova-12.0.2~a0~dev18-1.3 python-nova-2014.1.4.dev49-0.7.1 openstack-nova-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-api-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-cells-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-cert-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-compute-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-conductor-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-console-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-consoleauth-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-doc-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-novncproxy-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-objectstore-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-scheduler-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-vncproxy-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 python-nova-2014.1.4.dev49-0.7.1 as a component of SUSE OpenStack Cloud 4 openstack-nova-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-api-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-cells-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-cert-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-compute-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-conductor-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-console-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-consoleauth-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-novncproxy-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-objectstore-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-scheduler-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-serialproxy-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 openstack-nova-vncproxy-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 python-nova-12.0.2~a0~dev18-1.3 as a component of SUSE OpenStack Cloud 6 Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be allocated to two different instances. CVE-2014-8750 SUSE OpenStack Cloud 4:openstack-nova-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-api-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-cells-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-cert-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-compute-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-conductor-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-console-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-consoleauth-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-doc-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-novncproxy-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-objectstore-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-scheduler-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:openstack-nova-vncproxy-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 4:python-nova-2014.1.4.dev49-0.7.1 SUSE OpenStack Cloud 6:openstack-nova-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-api-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-cells-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-cert-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-compute-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-conductor-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-console-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-consoleauth-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-novncproxy-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-objectstore-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-scheduler-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-serialproxy-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:openstack-nova-vncproxy-12.0.2~a0~dev18-1.3 SUSE OpenStack Cloud 6:python-nova-12.0.2~a0~dev18-1.3 moderate 6 AV:N/AC:M/Au:S/C:P/I:P/A:P