CVE-2015-1881

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them, a different...

CVE-2014-9684

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them before the uploads...

CVE-2014-9684: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them before the uploads...

PT-2015-4352

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2014.2 through 2014.2.2 Description The issue allows remote authenticated users to cause a denial of service, specifically disk consumption, by creating a large number of images usi...

CVE-2015-1881: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them, a different...

CVE-2015-1195: Improper Limitation of a Pathname to a Restricted Directory

The V2 API in OpenStack Image Registry and Delivery Service Glance before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of a...

CVE-2014-9493: Undefined Security Weakness

The V2 API in OpenStack Image Registry and Delivery Service Glance before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property...

PT-2015-4243

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions prior to 2014.2.2 OpenStack Image Registry and Delivery Service Glance version 2014.1.4 Description The issue allows remote authenticated users to read or delete arbitrary files via...

CVE-2014-5356

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2014-5356: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2014-0162

The Sheepdog backend in OpenStack Image Registry and Delivery Service Glance 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location...

CVE-2014-0162: Improper Input Validation

The Sheepdog backend in OpenStack Image Registry and Delivery Service Glance 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location...

PT-2014-4378

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2013.2 through 2013.2.1 OpenStack Image Registry and Delivery Service Glance Icehouse before icehouse-2 Description The issue allows local users to obtain sensitive information by...

CVE-2014-1948: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

CVE-2013-4354: Improper Input Validation

The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...

PT-2013-4968

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions prior to 2.1 Description The issue allows local users to more easily inject images into arbitrary tenants by adding the tenant as a member of the image. This is due to a problem in...

CVE-2013-4428: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the downloadimage policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image...

CVE-2013-4428

OpenStack Image Registry and Delivery Service Glance Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the downloadimage policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image...

PT-2013-5012

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions Folsom through Grizzly before 2013.1.4 OpenStack Image Registry and Delivery Service Glance version Havana before 2013.2 Description The issue allows remote authenticated users to...