CVE-2015-1881
Published: 24 February 2015
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.
Priority
Status
Package | Release | Status |
---|---|---|
glance Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Not vulnerable
(code not present)
|
|
trusty |
Does not exist
(trusty was not-affected [code not present])
|
|
upstream |
Needs triage
|
|
utopic |
Not vulnerable
(1:2014.2.3-0ubuntu1)
|
|
vivid |
Not vulnerable
(1:2015.1~b3-0ubuntu1)
|
|
Patches: upstream: https://review.openstack.org/#/c/156553/ upstream: https://review.openstack.org/#/c/156493/ |