p PatchFirst

CVE-2016-8611

CVE-2016-8611

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenticated users, resulting in possible denial of service attacks through database table saturation.

CVSS 4.3 · Medium · EPSS 2.3%

Published
Updated

Stack: system

Affected products and versions

  • openstack-glance

    Versions
    • v1 and v2: Affected

    No fix published

  • glance Debian:12

    Versions
    • 2:25.1.0-2
    • 2:25.1.0-2+deb12u1
    • 2:25.1.0-2+deb12u2
    • 2:25.1.0-2+deb12u3
    • 2:26.0.0-1
    • 2:26.0.0-2
    • 2:26.0.0-3
    • 2:26.0.0-4
    • 2:26.0.0~rc1-1
    • 2:27.0.0-1
    • 2:27.0.0-2
    • 2:27.0.0~rc1-1
    • 2:28.0.0~rc1-1
    • 2:28.0.1-1
    • 2:28.0.1-2
    • 2:28.0.1-3
    • 2:28.0.1-3+deb12u1
    • 2:28.0.1-4
    • 2:29.0.0-1
    • 2:29.0.0-2
    • 2:29.0.0-3
    • 2:29.0.0-4
    • 2:29.0.0~rc1-1
    • 2:29.0.0~rc1-2
    • 2:30.0.0-1
    • 2:30.0.0-3
    • 2:30.0.0~rc1-1
    • 2:30.0.0~rc1-2
    • 2:31.0.0-1
    • 2:31.0.0-2
    • 2:31.0.0-3
    • 2:31.0.0-4
    • 2:31.0.0~rc1-1
    • 2:31.0.0~rc1-2
    • 2:32.0.0-1
    • 2:32.0.0-2
    • 2:32.0.0-3
    • 2:32.0.0-4
    • 2:32.0.0~rc1-1
    • 2:32.0.0~rc1-2
    • 2:32.0.0~rc1-3
    • 2:32.0.0~rc1-4
    • 2:32.0.0~rc2-1
    • 2:32.0.0~rc2-2
    • 2:33.0.0~rc1-1
    • 2:33.0.0~rc1-2
    • 2:33.0.0~rc1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glance Debian:13

    Versions
    • 2:30.0.0-3
    • 2:30.0.0-3+deb13u1
    • 2:30.0.0-3+deb13u2
    • 2:31.0.0-1
    • 2:31.0.0-2
    • 2:31.0.0-3
    • 2:31.0.0-4
    • 2:31.0.0~rc1-1
    • 2:31.0.0~rc1-2
    • 2:32.0.0-1
    • 2:32.0.0-2
    • 2:32.0.0-3
    • 2:32.0.0-4
    • 2:32.0.0~rc1-1
    • 2:32.0.0~rc1-2
    • 2:32.0.0~rc1-3
    • 2:32.0.0~rc1-4
    • 2:32.0.0~rc2-1
    • 2:32.0.0~rc2-2
    • 2:33.0.0~rc1-1
    • 2:33.0.0~rc1-2
    • 2:33.0.0~rc1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glance Debian:14

    Versions
    • 2:30.0.0-3
    • 2:31.0.0-1
    • 2:31.0.0-2
    • 2:31.0.0-3
    • 2:31.0.0-4
    • 2:31.0.0~rc1-1
    • 2:31.0.0~rc1-2
    • 2:32.0.0-1
    • 2:32.0.0-2
    • 2:32.0.0-3
    • 2:32.0.0-4
    • 2:32.0.0~rc1-1
    • 2:32.0.0~rc1-2
    • 2:32.0.0~rc1-3
    • 2:32.0.0~rc1-4
    • 2:32.0.0~rc2-1
    • 2:32.0.0~rc2-2
    • 2:33.0.0~rc1-1
    • 2:33.0.0~rc1-2
    • 2:33.0.0~rc1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glance Ubuntu:Pro:16.04:LTS

    Versions
    • 2:11.0.0-0ubuntu1
    • 2:12.0.0~b1-0ubuntu1
    • 2:12.0.0~b2-0ubuntu1
    • 2:12.0.0~b3-0ubuntu1
    • 2:12.0.0~rc1-0ubuntu1
    • 2:12.0.0-0ubuntu1
    • 2:12.0.0-0ubuntu2
    • 2:12.0.0-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →