Vulnerability-Lookup

CVE-2015-3241 (GCVE-0-2015-3241)

Vulnerability from cvelistv5 – Published: 2015-09-08 15:00 – Updated: 2024-08-06 05:39

Summary

OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1723.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75372	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1898.html	vendor-advisoryx_refsource_REDHAT
https://github.com/openstack/ossa/blob/482576204d…	x_refsource_CONFIRM
https://security.openstack.org/ossa/OSSA-2015-015.html	x_refsource_CONFIRM
https://launchpad.net/bugs/1387543	x_refsource_CONFIRM

Date Public

2015-08-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:32.092Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1723",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
          },
          {
            "name": "75372",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75372"
          },
          {
            "name": "RHSA-2015:1898",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://launchpad.net/bugs/1387543"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T15:57:02.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:1723",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
        },
        {
          "name": "75372",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75372"
        },
        {
          "name": "RHSA-2015:1898",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://launchpad.net/bugs/1387543"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3241",
    "datePublished": "2015-09-08T15:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:32.092Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-3241",
      "date": "2026-09-18",
      "epss": "0.0348",
      "percentile": "0.88559"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7FD6C19A-8301-4301-814A-62600672BE42",
                  "versionEndIncluding": "2014.2.3",
                  "versionStartIncluding": "2014.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "67984FCE-EC2A-4176-9D6F-69518BA8C060",
                  "versionEndIncluding": "2015.1.1",
                  "versionStartIncluding": "2015.1.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
        },
        {
          "lang": "es",
          "value": "Vulnerabilidad en OpenStack Compute (nova) 2015.1 hasta la versi\u00f3n 2015.1.1, 2014.2.3 y anteriores, no detiene el proceso de migraci\u00f3n cuando se borra la instancia, lo que permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (disco, red y otros consumos de memoria) modificando el tama\u00f1o y borr\u00e1ndo entonces la instancia."
        }
      ],
      "id": "CVE-2015-3241",
      "lastModified": "2024-11-21T02:28:58.727",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 6.8,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.0,
            "impactScore": 6.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2015-09-08T15:59:01.407",
      "references": [
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/75372"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://launchpad.net/bugs/1387543"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/75372"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://launchpad.net/bugs/1387543"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-399"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FD6C19A-8301-4301-814A-62600672BE42",
                    "versionEndIncluding": "2014.2.3",
                    "versionStartIncluding": "2014.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "67984FCE-EC2A-4176-9D6F-69518BA8C060",
                    "versionEndIncluding": "2015.1.1",
                    "versionStartIncluding": "2015.1.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad en OpenStack Compute (nova) 2015.1 hasta la versi\u00f3n 2015.1.1, 2014.2.3 y anteriores, no detiene el proceso de migraci\u00f3n cuando se borra la instancia, lo que permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (disco, red y otros consumos de memoria) modificando el tama\u00f1o y borr\u00e1ndo entonces la instancia."
          }
        ],
        "id": "CVE-2015-3241",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.8,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 6.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2015-09-08T15:59:01.407",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/75372"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://launchpad.net/bugs/1387543"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/75372"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://launchpad.net/bugs/1387543"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-399"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T08:26:39+00:00",
      "cve": "CVE-2015-3241",
      "id": "CVE-2015-3241",
      "initial_release_date": "2015-06-15T00:00:00+00:00",
      "product_status:fixed": "82",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "openstack-nova: Nova instance migration process does not stop when instance is deleted",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3241.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2025-10-08T00:07:35Z",
      "cve": "CVE-2015-3241",
      "id": "CVE-2015-3241",
      "initial_release_date": "2023-02-15T05:19:14Z",
      "product_status:recommended": "30",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2015-3241",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2015-3241.json",
      "version": "6"
    }
  }
}

CNVD-2015-04540

Vulnerability from cnvd - Published: 2015-07-15

Title

OpenStack Nova拒绝服务漏洞（CNVD-2015-04540）

Description

OpenStack Compute (Nova)是用Python编写的云计算构造控制器，属于laaS系统的一部分。 OpenStack Nova存在拒绝服务漏洞，允许攻击者利用此漏洞发起拒绝服务攻击。

Severity

中

Patch Name

OpenStack Nova拒绝服务漏洞（CNVD-2015-04540）的补丁

Patch Description

OpenStack Compute (Nova)是用Python编写的云计算构造控制器，属于laaS系统的一部分。 OpenStack Nova存在拒绝服务漏洞，允许攻击者利用此漏洞发起拒绝服务攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布升级补丁/版本以修复这个安全问题，请用户及时下载更新： http://www.openstack.org/

Reference

http://www.securityfocus.com/bid/75372

Impacted products

Name
OpenStack Nova

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75372"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-3241"
    }
  },
  "description": "OpenStack Compute (Nova)\u662f\u7528Python\u7f16\u5199\u7684\u4e91\u8ba1\u7b97\u6784\u9020\u63a7\u5236\u5668\uff0c\u5c5e\u4e8elaaS\u7cfb\u7edf\u7684\u4e00\u90e8\u5206\u3002\r\n\r\nOpenStack Nova\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
  "discovererName": "George Shuklin",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u5347\u7ea7\u8865\u4e01/\u7248\u672c\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttp://www.openstack.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04540",
  "openTime": "2015-07-15",
  "patchDescription": "OpenStack Compute (Nova)\u662f\u7528Python\u7f16\u5199\u7684\u4e91\u8ba1\u7b97\u6784\u9020\u63a7\u5236\u5668\uff0c\u5c5e\u4e8elaaS\u7cfb\u7edf\u7684\u4e00\u90e8\u5206\u3002\r\n\r\nOpenStack Nova\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "OpenStack Nova\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2015-04540\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "OpenStack Nova"
  },
  "referenceLink": "http://www.securityfocus.com/bid/75372",
  "serverity": "\u4e2d",
  "submitTime": "2015-07-08",
  "title": "OpenStack Nova\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2015-04540\uff09"
}

FKIE_CVE-2015-3241

Vulnerability from fkie_nvd - Published: 2015-09-08 15:59 - Updated: 2026-06-17 00:25

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2015-1723.html	Third Party Advisory
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2015-1898.html	Third Party Advisory
secalert@redhat.com	http://www.securityfocus.com/bid/75372	Third Party Advisory, VDB Entry
secalert@redhat.com	https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml	Third Party Advisory
secalert@redhat.com	https://launchpad.net/bugs/1387543	Third Party Advisory
secalert@redhat.com	https://security.openstack.org/ossa/OSSA-2015-015.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2015-1723.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2015-1898.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75372	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://launchpad.net/bugs/1387543	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://security.openstack.org/ossa/OSSA-2015-015.html	Vendor Advisory

Impacted products

	Vendor	Product	Version
	openstack	nova	*
	openstack	nova	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FD6C19A-8301-4301-814A-62600672BE42",
              "versionEndIncluding": "2014.2.3",
              "versionStartIncluding": "2014.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "67984FCE-EC2A-4176-9D6F-69518BA8C060",
              "versionEndIncluding": "2015.1.1",
              "versionStartIncluding": "2015.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en OpenStack Compute (nova) 2015.1 hasta la versi\u00f3n 2015.1.1, 2014.2.3 y anteriores, no detiene el proceso de migraci\u00f3n cuando se borra la instancia, lo que permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (disco, red y otros consumos de memoria) modificando el tama\u00f1o y borr\u00e1ndo entonces la instancia."
    }
  ],
  "id": "CVE-2015-3241",
  "lastModified": "2026-06-17T00:25:36.287",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-09-08T15:59:01.407",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75372"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://launchpad.net/bugs/1387543"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://launchpad.net/bugs/1387543"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-3VX7-XFF6-H2VX

Vulnerability from github – Published: 2022-05-14 01:58 – Updated: 2024-05-14 20:53

Summary

OpenStack Nova instance migration process does not stop when instance is deleted

Details

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c 12.0.0.0b3"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "nova"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "112.0.0.0b3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2015-3241"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-14T20:53:49Z",
    "nvd_published_at": "2015-09-08T15:59:00Z",
    "severity": "MODERATE"
  },
  "details": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.",
  "id": "GHSA-3vx7-xff6-h2vx",
  "modified": "2024-05-14T20:53:49Z",
  "published": "2022-05-14T01:58:45Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3241"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/7ab75d5b0b75fc3426323bef19bf436a258b9707"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/b5020a047fc487f35b76fc05f31e52665a1afda1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/bf23643e36c8764b4bd532546a2cc04385fe0cff"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2015:1723"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2015:1898"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2015-3241"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1232782"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/openstack/nova"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.net/bugs/1387543"
    },
    {
      "type": "WEB",
      "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75372"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "OpenStack Nova instance migration process does not stop when instance is deleted"
}

GSD-2015-3241

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2015-3241

Aliases

CVE-2015-3241

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-3241",
    "description": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.",
    "id": "GSD-2015-3241",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-3241.html",
      "https://access.redhat.com/errata/RHSA-2015:1898",
      "https://access.redhat.com/errata/RHSA-2015:1723",
      "https://ubuntu.com/security/CVE-2015-3241"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-3241"
      ],
      "details": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.",
      "id": "GSD-2015-3241",
      "modified": "2023-12-13T01:20:07.810864Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2015-3241",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2015-1898.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2015-1723.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/75372",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/75372"
          },
          {
            "name": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml",
            "refsource": "MISC",
            "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
          },
          {
            "name": "https://launchpad.net/bugs/1387543",
            "refsource": "MISC",
            "url": "https://launchpad.net/bugs/1387543"
          },
          {
            "name": "https://security.openstack.org/ossa/OSSA-2015-015.html",
            "refsource": "MISC",
            "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2015.1.1",
                "versionStartIncluding": "2015.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2014.2.3",
                "versionStartIncluding": "2014.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3241"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1723",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
            },
            {
              "name": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
            },
            {
              "name": "https://security.openstack.org/ossa/OSSA-2015-015.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
            },
            {
              "name": "RHSA-2015:1898",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
            },
            {
              "name": "https://launchpad.net/bugs/1387543",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://launchpad.net/bugs/1387543"
            },
            {
              "name": "75372",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/75372"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T00:48Z",
      "publishedDate": "2015-09-08T15:59Z"
    }
  }
}

PYSEC-2026-861

Vulnerability from pysec - Published: 2026-07-06 08:03 - Updated: 2026-07-06 08:03

Details

Impacted products

Name	purl
nova	pkg:pypi/nova

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "nova",
        "purl": "pkg:pypi/nova"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.0.0.0b3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2015-3241",
    "GHSA-3vx7-xff6-h2vx"
  ],
  "details": "OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.",
  "id": "PYSEC-2026-861",
  "modified": "2026-07-06T08:03:22.520788Z",
  "published": "2026-07-06T08:03:22.520788Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3241"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/7ab75d5b0b75fc3426323bef19bf436a258b9707"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/b5020a047fc487f35b76fc05f31e52665a1afda1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/bf23643e36c8764b4bd532546a2cc04385fe0cff"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2015:1723"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2015:1898"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2015-3241"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1232782"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/openstack/nova"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.net/bugs/1387543"
    },
    {
      "type": "WEB",
      "url": "https://security.openstack.org/ossa/OSSA-2015-015.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1723.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1898.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75372"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/nova"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-3vx7-xff6-h2vx"
    }
  ],
  "summary": "OpenStack Nova instance migration process does not stop when instance is deleted"
}

RHSA-2015:1723

Vulnerability from csaf_redhat - Published: 2015-09-03 17:55 - Updated: 2026-07-31 14:36

Summary

Red Hat Security Advisory: openstack-nova security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2015-3241.

CVE-2015-3241

A denial of service flaw was found in the OpenStack Compute (nova) instance migration process. Because the migration process does not terminate when an instance is deleted, an authenticated user could bypass user quota and deplete all available disk space by repeatedly re-sizing and deleting an instance.

2.7 ()


                
                  AV:A/AC:L/Au:S/C:N/I:N/A:P

Fixed: 17 products

https://access.redhat.com/errata/RHSA-2015:1723

Open the full advisory

RHSA-2015:1898

Vulnerability from csaf_redhat - Published: 2015-10-15 12:28 - Updated: 2026-07-31 14:36

Summary

Red Hat Security Advisory: openstack-nova security update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2015-3241.

CVE-2015-3241

2.7 ()


                
                  AV:A/AC:L/Au:S/C:N/I:N/A:P

Fixed: 65 products

https://access.redhat.com/errata/RHSA-2015:1898

Open the full advisory

RHSA-2015_1723

Vulnerability from csaf_redhat - Published: 2015-09-03 17:55 - Updated: 2024-11-14 18:11

Summary

Red Hat Security Advisory: openstack-nova security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2015-3241.

CVE-2015-3241

2.7 ()


                
                  AV:A/AC:L/Au:S/C:N/I:N/A:P

Fixed: 17 products

https://access.redhat.com/errata/RHSA-2015:1723

Open the full advisory

RHSA-2015_1898

Vulnerability from csaf_redhat - Published: 2015-10-15 12:28 - Updated: 2024-11-14 18:11

Summary

Red Hat Security Advisory: openstack-nova security update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2015-3241.

CVE-2015-3241

2.7 ()


                
                  AV:A/AC:L/Au:S/C:N/I:N/A:P

Fixed: 65 products

https://access.redhat.com/errata/RHSA-2015:1898

Open the full advisory

SUSE-SU-2015:2219-1

Vulnerability from csaf_suse - Published: 2015-12-07 14:22 - Updated: 2015-12-07 14:22

Summary

Security update for openstack-nova

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2015-3241.

CVE-2015-3241

Recommended: 15 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2015-3241 (GCVE-0-2015-3241)

Tags

Sightings

Nomenclature

Related by attack behaviour