Published: 14 August 2015
OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.
Launchpad, Ubuntu, Debian
|Ubuntu 14.04 ESM (Trusty Tahr)||
Does not exist
(trusty was not-affected [code not present])
Upstream: https://review.openstack.org/#/c/181816/ (kilo)
Upstream: https://review.openstack.org/#/c/181345/ (liberty)