CVE-2016-7498

6.5MEDIUM

Key Information

Vendor: Openstack
Status: Compute \(nova\)
Vendor: CVE Published:; 27 September 2016

Summary

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

References

http://www.securityfocus.com/bid/93068

vdb-entryx_refsource_BID

http://www.openwall.com/lists/oss-security/2016/09/23/1

mailing-listx_refsource_MLIST

https://security.openstack.org/ossa/OSSA-2016-011.html

x_refsource_CONFIRM

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Sep 27, 2016
Vulnerability Reserved
Sep 9, 2016

Collectors

NVD DatabaseMitre Database

.