Denial Of Service (DoS)

2019-01-1509:05:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.023 Low

EPSS

Percentile

89.8%

JSON

openstack-glance is vulnerable to denial of service (DoS) attacks. The vulnerability exists as OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.

CPENameOperatorVersion
python-glanceclienteq0.12.0__1.el7ost
python-glanceclienteq0.14.2__1.el7ost
python-glanceclienteq0.13.1__1.el7ost
openstack-glanceeq2014.1.1__1.el6ost
openstack-glanceeq17.0.0__0.2.0rc2.el7
openstack-glanceeq2012.1.1__1.el6
openstack-glanceeq2013.2__5.el6ost
openstack-glanceeq2013.2.2__3.el6ost
openstack-glanceeq2013.1__3.el6ost
openstack-glanceeq2014.1__4.el7ost

Name	Operator	Version
python-glanceclient	eq	0.12.0__1.el7ost
python-glanceclient	eq	0.14.2__1.el7ost
python-glanceclient	eq	0.13.1__1.el7ost
openstack-glance	eq	2014.1.1__1.el6ost
openstack-glance	eq	17.0.0__0.2.0rc2.el7
openstack-glance	eq	2012.1.1__1.el6
openstack-glance	eq	2013.2__5.el6ost
openstack-glance	eq	2013.2.2__3.el6ost
openstack-glance	eq	2013.1__3.el6ost
openstack-glance	eq	2014.1__4.el7ost