CVE-2015-3289
Published: 14 August 2015
OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.
Priority
Status
Package | Release | Status |
---|---|---|
glance Launchpad, Ubuntu, Debian |
precise |
Not vulnerable
(code not present)
|
trusty |
Does not exist
(trusty was not-affected [code not present])
|
|
upstream |
Released
(2015.1.1)
|
|
vivid |
Not vulnerable
(1:2015.1.1-0ubuntu2)
|
|
Patches: upstream: https://review.openstack.org/#/c/181816/ upstream: https://review.openstack.org/#/c/181345/ |