CVE-2014-9684
Published: 24 February 2015
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
glance Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Not vulnerable
(code not present)
|
|
| trusty |
Does not exist
(trusty was not-affected [code not present])
|
|
| upstream |
Needs triage
|
|
| utopic |
Not vulnerable
(1:2014.2.3-0ubuntu1)
|
|
| vivid |
Not vulnerable
(1:2015.1~b2-0ubuntu1)
|
|
|
Patches: upstream: https://review.openstack.org/#/c/122427/ upstream: https://review.openstack.org/#/c/157067/ |
||