REDHAT-BUG-1232782: Medium severity openstack compute (nova) vulnerability
Title: Nova instance migration process does not stop when instance is deleted Reporter: George Shuklin (Webzilla LTD) Products: Nova Affects: versions through 2014.1.4, and 2014.2 versions through 2014.2.3, and version 2015.1.0
Description: George Shuklin from Webzilla LTD reported a vulnerability in Nova migration process. By resizing and deleting an instance repeatedly an authenticated user may overcome his quota and overload Nova computes node resulting in a denial of service attack. All Nova setups are affected.
Upstream bug: https://launchpad.net/bugs/1387543
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1232782?
The severity of REDHAT-BUG-1232782 is considered high due to the potential for incomplete instance migration during deletion.
How do I fix REDHAT-BUG-1232782?
To fix REDHAT-BUG-1232782, upgrade to a version of OpenStack Nova that is not affected, specifically to versions after 2014.2.3 or 2015.1.1 and above.
Which versions are affected by REDHAT-BUG-1232782?
REDHAT-BUG-1232782 affects OpenStack Nova versions up to 2014.1.4, 2014.2.x through 2014.2.3, and precisely 2015.1.0.
What is the impact of REDHAT-BUG-1232782 on system performance?
The impact of REDHAT-BUG-1232782 on system performance includes possible resource leaks as instance migration may continue even after an instance is deleted.
Who reported the REDHAT-BUG-1232782 vulnerability?
The REDHAT-BUG-1232782 vulnerability was reported by George Shuklin from Webzilla LTD.