GitHub Advisoryadvisory · PyPI
GHSA-3vx7-xff6-h2vx OpenStack Nova instance migration process does not stop when instance is deleted
MEDIUM
Official page ↗
- Aliases
- CVE-2015-3241
- Ecosystem
- PyPI
- Packages
- nova
- Severity
- Moderate
- Reviewed
- 2024-05-14
Affected packages
• PyPI nova: < 112.0.0.0b3 → fixed in 112.0.0.0b3
Description
OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.
Related
Alias · CVE (1)
- CVE-2015-3241 OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted,… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-3241 advisory
- https://github.com/openstack/nova/commit/7ab75d5b0b75fc3426323bef19bf436a258b9707 web
- https://github.com/openstack/nova/commit/b5020a047fc487f35b76fc05f31e52665a1afda1 web
- https://github.com/openstack/nova/commit/bf23643e36c8764b4bd532546a2cc04385fe0cff web
- https://access.redhat.com/errata/RHSA-2015:1723 web
- https://access.redhat.com/errata/RHSA-2015:1898 web
- https://access.redhat.com/security/cve/CVE-2015-3241 web
- https://bugzilla.redhat.com/show_bug.cgi?id=1232782 web
- https://github.com/openstack/nova package
- https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml web
- https://launchpad.net/bugs/1387543 web
- https://security.openstack.org/ossa/OSSA-2015-015.html web
- http://rhn.redhat.com/errata/RHSA-2015-1723.html web
- http://rhn.redhat.com/errata/RHSA-2015-1898.html web
- http://www.securityfocus.com/bid/75372 web