OpenStack Glance Denial of service by creating a large number of images
Moderate severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated May 14, 2024
Description
Published by the National Vulnerability Database
Feb 24, 2015
Published to the GitHub Advisory Database
May 17, 2022
Last updated
May 14, 2024
Reviewed
May 14, 2024
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.
References