CVE-2015-1881
Fixed in a distro release EPSS 2%
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.
Products: openstack image_registry_and_delivery_service_(glance)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | glance | 11.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 6 | openstack-glance | 0:2014.2.3-1.el7ost |
| Red Hat openstack 6 | openstack-glance-doc | 0:2014.2.3-1.el7ost |
| Red Hat openstack 6 | python-glance | 0:2014.2.3-1.el7ost |
| Red Hat openstack 6 | python-glance-store | 0:0.1.10-3.el7ost |