CVE-2014-9684: Medium severity Openstack Image Registry And Delivery Service \(glance\) vulnerability
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9684?
CVE-2014-9684 is classified as a moderate severity vulnerability due to its potential for denial of service through disk consumption.
How do I fix CVE-2014-9684?
To fix CVE-2014-9684, upgrade your OpenStack Glance to version 11.0.0a0 or newer.
Who is affected by CVE-2014-9684?
CVE-2014-9684 affects remote authenticated users of OpenStack Image Registry and Delivery Service versions 2014.2 through 2014.2.2.
What type of attack does CVE-2014-9684 enable?
CVE-2014-9684 enables a denial of service attack through excessive disk space consumption by creating and deleting numerous images.
When was CVE-2014-9684 disclosed?
CVE-2014-9684 was disclosed in February 2015.