CVE-2014-9623
CVE-2014-9623
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
EPSS 2.9% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
glance Debian:12
- Affected ranges
- ECOSYSTEM: < 2014.1.3-12
Update to 2014.1.3-12
glance Debian:13
- Affected ranges
- ECOSYSTEM: < 2014.1.3-12
Update to 2014.1.3-12
glance Debian:14
- Affected ranges
- ECOSYSTEM: < 2014.1.3-12
Update to 2014.1.3-12
glance PyPI
- Affected ranges
- ECOSYSTEM: < 11.0.0a0
Update to 11.0.0a0
Original sources
- http://rhn.redhat.com/errata/RHSA-2015-0838.html
- http://rhn.redhat.com/errata/RHSA-2015-0644.html
- http://secunia.com/advisories/62165
- http://rhn.redhat.com/errata/RHSA-2015-0837.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- https://bugs.launchpad.net/glance/+bug/1383973
- http://www.openwall.com/lists/oss-security/2015/01/18/4
- https://bugs.launchpad.net/glance/+bug/1398830
- https://security.openstack.org/ossa/OSSA-2015-003.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-9623