CVE-2015-1881 | BDVDB-2026-68202 Detail

Description#

OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.openstack.org/pipermail/openstack-announce/2015-February/000336.html
http://rhn.redhat.com/errata/RHSA-2015-0938.html
https://bugs.launchpad.net/glance/+bug/1420696
http://www.securityfocus.com/bid/72694

Exploit#

No public exploit known

History#

Version 12015-02-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.