Lucene search
+L

357 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:55 a.m.14 views

OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image

OpenStack Compute Nova Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service host file system disk consumption by creating an image with a large virtual size that does not contain a large amount of data...

2.1CVSS6.8AI score0.00383EPSS
SaveExploits0References10Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 4:41 a.m.33 views

OpenStack Nova denial of service through compressed disk images

OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service host file system disk consumption via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096...

2.1CVSS6.8AI score0.00368EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 4:41 a.m.35 views

OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image

OpenStack Compute Nova Folsom, Grizzly, and Havana, when usecowimages is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service host file system disk consumption by transferring an image with a large virtual size that does not contai...

1.9CVSS6.8AI score0.00438EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2022/05/17 4:41 a.m.5 views

GHSA-2W87-5QCJ-J6GX OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image

OpenStack Compute Nova Folsom, Grizzly, and Havana, when usecowimages is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service host file system disk consumption by transferring an image with a large virtual size that does not contai...

1.9CVSS6AI score0.00438EPSS
SaveExploits1References8
OSV
OSV
added 2022/05/17 3:44 a.m.33 views

GHSA-GVJG-R9FV-7QX9 OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allows remote authenticated users to bypass the storage quota and cause a denial of service disk consumption by deleting images that are being uploaded using a token that expires during the process. NOTE: this...

6.8CVSS4.4AI score0.02396EPSS
SaveExploits0References9
OSV
OSV
added 2022/05/17 3:10 a.m.3 views

GHSA-H737-Q6G6-8WR6 OpenStack Glance Denial of service by creating a large number of images

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them before the uploads...

7.1CVSS6AI score0.01981EPSS
SaveExploits1References8
OSV
OSV
added 2022/05/17 3:9 a.m.9 views

GHSA-4JP4-3C62-R8JV OpenStack Glance Denial of service by creating a large number of images

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them, a different...

8.7CVSS6AI score0.02101EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2022/05/17 3:9 a.m.26 views

OpenStack Glance Denial of service by creating a large number of images

OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them, a different...

4CVSS6.8AI score0.02101EPSS
SaveExploits1References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 3:5 a.m.24 views

OpenStack Glance improper validation of the image_size_cap configuration option

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

4CVSS6.8AI score0.02127EPSS
SaveExploits0References12Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:59 a.m.41 views

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...

7.8CVSS6.7AI score0.03062EPSS
SaveExploits1References16Affected Software3
OSV
OSV
added 2022/05/14 1:59 a.m.6 views

GHSA-PJVW-P2V5-WF6Q OpenStack Nova Long server names grow nova-api log files significantly

OpenStack Compute Nova Essex before 2011.3 allows remote authenticated users to cause a denial of service Nova-API log file and disk consumption via a long server name...

4CVSS6AI score0.02073EPSS
SaveExploits1References9
OSV
OSV
added 2022/05/14 1:58 a.m.20 views

GHSA-MFMJ-GWG3-VHW7 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service

OpenStack Compute nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service disk consumption by deleting instances while in the resize state...

6.8CVSS6.1AI score0.03353EPSS
SaveExploits0References11
OSV
OSV
added 2022/05/14 1:58 a.m.11 views

GHSA-HRV9-4X4C-9JC8 OpenStack Nova DoS through ephemeral disk backing files

The libvirt driver in OpenStack Compute Nova before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service disk consumption by creating and deleting instances with unique ostype settings, which triggers the creation of a new ephemeral disk backing...

4CVSS5.9AI score0.0202EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/14 1:58 a.m.40 views

OpenStack Compute (nova) allows remote authenticated users to cause a denial of service

OpenStack Compute nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service disk consumption by deleting instances while in the resize state...

6.8CVSS6AI score0.03353EPSS
SaveExploits0References11Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 1:58 a.m.41 views

OpenStack Nova DoS through ephemeral disk backing files

The libvirt driver in OpenStack Compute Nova before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service disk consumption by creating and deleting instances with unique ostype settings, which triggers the creation of a new ephemeral disk backing...

4CVSS6.7AI score0.0202EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/14 1:8 a.m.44 views

GHSA-G63P-MFCM-54C4 OpenStack Nova VMware instance leak potentially leading to compute DoS

The VMware driver in OpenStack Compute Nova before 2014.1.4 allows remote authenticated users to cause a denial of service disk consumption by deleting an instance in the resize state...

4CVSS6AI score0.02006EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/14 1:8 a.m.26 views

OpenStack Nova VMware instance leak potentially leading to compute DoS

The VMware driver in OpenStack Compute Nova before 2014.1.4 allows remote authenticated users to cause a denial of service disk consumption by deleting an instance in the resize state...

4CVSS6.7AI score0.02006EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2020/12/06 4:3 a.m.13 views

Denail Of Service (DoS)

Polygen is vulnerable to denial of service. Precompiled grammar objects with world-writable permissions that are generated allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

2.1CVSS4.2AI score0.00326EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.30 views

EulerOS Virtualization 3.0.6.0 : git (EulerOS-SA-2020-1714)

According to the version of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via...

5.5CVSS6.3AI score0.01641EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/04/01 1:56 a.m.42 views

Updated sympa packages fix security vulnerability

Updated sympa packages fix security vulnerability: Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service disk consumption from temporary files, and a flood of notifications to listmasters via a series of requests with malformed parameters CVE-2020-9369...

7.5CVSS5.4AI score0.02915EPSS
SaveExploits0References2
Rows per page
Query Builder