CVE-2014-9684

OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to…

published February 24, 2015

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01997 · 80.5th percentile
Published
2015-02-24T15:00Z
EPSS history
Timeline
  • 24 FEB 15:00Z
    OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to…
    cvelistv5