CVE-2014-9623
Fixed in a distro release EPSS 3%
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
Products: redhat openstack, openstack image_registry_and_delivery_service_(glance)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | glance | 11.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glance | 2014.1.3-12 |
| Debian 13 | glance | 2014.1.3-12 |
| Red Hat openstack 5 | openstack-glance | 0:2014.1.4-1.el6ost |
| Red Hat openstack 5 | openstack-glance | 0:2014.1.4-1.el7ost |
| Red Hat openstack 5 | openstack-glance-doc | 0:2014.1.4-1.el6ost |
| Red Hat openstack 5 | openstack-glance-doc | 0:2014.1.4-1.el7ost |
| Red Hat openstack 5 | python-glance | 0:2014.1.4-1.el7ost |
| Red Hat openstack 5 | python-glance | 0:2014.1.4-1.el6ost |
| Red Hat openstack 6 | openstack-glance | 0:2014.2.2-1.el7ost |
| Red Hat openstack 6 | openstack-glance-doc | 0:2014.2.2-1.el7ost |
| Red Hat openstack 6 | python-glance | 0:2014.2.2-1.el7ost |
| Red Hat openstack 6 | python-glanceclient | 1:0.14.2-2.el7ost |
| Red Hat openstack 6 | python-glanceclient-doc | 1:0.14.2-2.el7ost |