Denial Of Service (DoS)

2019-01-1509:07:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

JSON

openstack-nova is vulnerable to denial of service (DoS) attacks. The vulnerability exists as OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.

CPENameOperatorVersion
openstack-novaeq15.1.5__1.el7
openstack-novaeq2013.2.4__2.el6ost
openstack-novaeq2013.2__10.el6ost
openstack-novaeq16.1.4__2.el7
openstack-novaeq2015.1.0__17.el7ost
openstack-novaeq2014.1.4__5.el7ost
openstack-novaeq2013.1.1__2.el6ost
openstack-novaeq2014.1.1__3.el6ost
openstack-novaeq2014.2.3__29.el7ost
openstack-novaeq17.0.3__1.el7

Name	Operator	Version
openstack-nova	eq	15.1.5__1.el7
openstack-nova	eq	2013.2.4__2.el6ost
openstack-nova	eq	2013.2__10.el6ost
openstack-nova	eq	16.1.4__2.el7
openstack-nova	eq	2015.1.0__17.el7ost
openstack-nova	eq	2014.1.4__5.el7ost
openstack-nova	eq	2013.1.1__2.el6ost
openstack-nova	eq	2014.1.1__3.el6ost
openstack-nova	eq	2014.2.3__29.el7ost
openstack-nova	eq	17.0.3__1.el7