CVE-2016-7498

MEDIUM 6.5CVE-2016-7498 · Published 27/09/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
compute (nova) openstack	`= 13.0.0`	No fix yet

Description

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

References

openwall.com/lists/oss-security/2016/09/21/8 · Mailing List
openwall.com/lists/oss-security/2016/09/23/1 · Mailing List
securityfocus.com/bid/93068 · Third Party Advisory
security.openstack.org/ossa/OSSA-2016-011.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free