Lucene search

K
nvd[email protected]NVD:CVE-2014-9623
HistoryJan 23, 2015 - 3:59 p.m.

CVE-2014-9623

2015-01-2315:59:06
CWE-399
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.

Affected configurations

NVD
Node
redhatopenstackMatch5.0
Node
openstackimage_registry_and_delivery_service_\(glance\)Range2014.1.3
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2014.2
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2014.2rc1
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2014.2rc2
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2014.2rc3

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%