Moderate severityNVD Advisory· Published Oct 31, 2014· Updated Jun 17, 2026

CVE-2014-8333

Description

The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
novaPyPI	< 12.0.0a0	12.0.0a0

Affected products

OpenStack/Nova
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
Range: >=2014.1,<2014.1.4
Red Hat/Openstack
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
ghsa-coords
pkg:pypi/nova
Range: < 12.0.0a0

Patches

Vulnerability mechanics

References

lists.openstack.org/pipermail/openstack-announce/2014-October/000298.htmlnvdPatchVendor AdvisoryWEB
rhn.redhat.com/errata/RHSA-2015-0843.htmlnvdThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2015-0844.htmlnvdThird Party AdvisoryWEB
secunia.com/advisories/60531nvdPermissions RequiredThird Party AdvisoryWEB
bugs.launchpad.net/nova/+bug/1359138nvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-g63p-mfcm-54c4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-8333ghsaADVISORY
github.com/openstack/nova/commit/d71445c7d2d2921d10a08f82330f0ab8ef4f7df2ghsaWEB
github.com/openstack/nova/commit/e1f8664c9fa83f77f5bb763ffcc3157905ed954cghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000