CVE-2015-3289

MEDIUM 4.0CVE-2015-3289 · Published 14/08/2015 · updated 17/06/2026

In short

CVE-2015-3289 is a MEDIUM (CVSS 4.0) vulnerability affecting glance (openstack).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
glance openstack	`≤ 2015.1.0`	No fix yet

Description

OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.

References

lists.openstack.org/pipermail/openstack-announce/2015-July/000481.html · Patch
securityfocus.com/bid/76068
bugs.launchpad.net/glance/+bug/1454087 · Patch

More vulnerabilities in glance

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free