CVE-2014-9684
Medium
Description
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.
SeverityMedium
CVSS4.0
Exploit probability—
Product
Openstack Image Registry And Delivery Service \(glance\)
PublishedFeb 24, 2015
First seenFeb 24, 2015
How to fix
Update
- glance11.0.0a0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack image_registry_and_delivery_service_\(glance\) | 2014.2, 2014.2.1, 2014.2.2 | — |
| glancePyPI | v < 11.0.0a0 | 11.0.0a0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.