CVE-2015-3289 OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deletin...
MediumCVSS 4.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glance(Debian:12) | < 2015.1.0-4 | 2015.1.0-4 |
| debian/glance(Debian:13) | < 2015.1.0-4 | 2015.1.0-4 |
| debian/glance(Debian:14) | < 2015.1.0-4 | 2015.1.0-4 |
| OpenStack Glance | <= 2015.1.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-3289 vendor-advisory
- [openstack-announce] 20150728 [OSSA 2015-013] Glance task flow may fail to delete image from backend mailing-list patch vendor-advisory
- 76068 vdb-entry
- bugs.launchpad.net patch
- bugs.debian.org issue-tracking