OpenStack Glance vulnerability

2014-08-2100:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Releases

Ubuntu 14.04 ESM

Packages

glance - OpenStack Image Registry and Delivery Service

Details

Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not
properly honor the image_size_cap configuration option. A remote
authenticated attacker could exploit this to cause a denial of service via
disk consumption.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchglance-common< 1:2014.1.2-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchglance< 1:2014.1.2-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchglance-api< 1:2014.1.2-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchglance-registry< 1:2014.1.2-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchpython-glance< 1:2014.1.2-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchpython-glance-doc< 1:2014.1.2-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	glance-common	< 1:2014.1.2-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	glance	< 1:2014.1.2-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	glance-api	< 1:2014.1.2-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	glance-registry	< 1:2014.1.2-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	python-glance	< 1:2014.1.2-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	python-glance-doc	< 1:2014.1.2-0ubuntu1.1	UNKNOWN