CVE-2014-9623: Medium severity redhat Openstack vulnerability
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9623?
CVE-2014-9623 is considered to have a moderate severity level due to its potential to cause denial of service through disk consumption.
How do I fix CVE-2014-9623?
To fix CVE-2014-9623, upgrade OpenStack Glance to version 11.0.0a0 or later, or apply relevant patches provided by your distribution.
What versions of OpenStack Glance are affected by CVE-2014-9623?
CVE-2014-9623 affects OpenStack Glance versions from 2014.2.x to 2014.2.1, as well as 2014.1.3 and earlier.
Can CVE-2014-9623 be exploited by unauthenticated users?
No, CVE-2014-9623 requires remote authenticated users to exploit the vulnerability.
What is the impact of CVE-2014-9623 on my OpenStack environment?
The impact of CVE-2014-9623 could lead to denial of service due to excessive disk usage by bypassing storage quotas.