Staging Environment: Content and features may be unstable or change without notice.
Advisory details: gitlab / pypi/nova/CVE-2015-3241
Advisory ID gitlab/pypi/nova/CVE-2015-3241
Aliases CVE-2015-3241
GHSA-3vx7-xff6-h2vx
Summary OpenStack Nova instance migration process does not stop when instance is deleted OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nova/CVE-2015-3241.yml
Reference id Reference type URL
https://bugzilla.redhat.com/show_bug.cgi?id=1232782
https://github.com/openstack/nova
https://github.com/openstack/nova/commit/7ab75d5b0b75fc3426323bef19bf436a258b9707
https://github.com/openstack/nova/commit/b5020a047fc487f35b76fc05f31e52665a1afda1
https://github.com/openstack/nova/commit/bf23643e36c8764b4bd532546a2cc04385fe0cff
https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml
https://launchpad.net/bugs/1387543
https://security.openstack.org/ossa/OSSA-2015-015.html
CVE-2015-3241 https://access.redhat.com/security/cve/CVE-2015-3241
CVE-2015-3241 https://nvd.nist.gov/vuln/detail/CVE-2015-3241
GHSA-3vx7-xff6-h2vx https://github.com/advisories/GHSA-3vx7-xff6-h2vx
RHSA-2015:1723 https://access.redhat.com/errata/RHSA-2015:1723
RHSA-2015:1898 https://access.redhat.com/errata/RHSA-2015:1898

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nova/CVE-2015-3241.yml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

There are no SSVC decisions available.