CVE-2014-9684 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9684 Interim 1 9 2023-07-02T01:07:16Z current 2021-05-30T13:25:07Z 2023-07-02T01:07:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9684 OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE OpenStack Cloud 5 SUSE OpenStack Cloud 6 openstack-ceilometer-2014.2.4.dev18-9.7 openstack-ceilometer-agent-central-2014.2.4.dev18-9.7 openstack-ceilometer-agent-compute-2014.2.4.dev18-9.7 openstack-ceilometer-agent-ipmi-2014.2.4.dev18-9.7 openstack-ceilometer-agent-notification-2014.2.4.dev18-9.7 openstack-ceilometer-alarm-evaluator-2014.2.4.dev18-9.7 openstack-ceilometer-alarm-notifier-2014.2.4.dev18-9.7 openstack-ceilometer-api-2014.2.4.dev18-9.7 openstack-ceilometer-collector-2014.2.4.dev18-9.7 openstack-ceilometer-doc-2014.2.4.dev18-9.11 openstack-cinder-2014.2.4.dev19-9.7 openstack-cinder-api-2014.2.4.dev19-9.7 openstack-cinder-backup-2014.2.4.dev19-9.7 openstack-cinder-doc-2014.2.4.dev19-9.12 openstack-cinder-scheduler-2014.2.4.dev19-9.7 openstack-cinder-volume-2014.2.4.dev19-9.7 openstack-glance-11.0.2~a0~dev2-1.1 openstack-glance-2014.2.4.dev5-9.5 openstack-glance-doc-2014.2.4.dev5-9.7 openstack-heat-2014.2.4.dev13-9.6 openstack-heat-api-2014.2.4.dev13-9.6 openstack-heat-api-cfn-2014.2.4.dev13-9.6 openstack-heat-api-cloudwatch-2014.2.4.dev13-9.6 openstack-heat-doc-2014.2.4.dev13-9.8 openstack-heat-engine-2014.2.4.dev13-9.6 openstack-keystone-2014.2.4.dev5-11.8 openstack-keystone-doc-2014.2.4.dev5-11.12 openstack-sahara-2014.2.4.dev3-9.5 openstack-sahara-api-2014.2.4.dev3-9.5 openstack-sahara-doc-2014.2.4.dev3-9.5 openstack-sahara-engine-2014.2.4.dev3-9.5 openstack-suse-sudo-2014.2-9.2 python-ceilometer-2014.2.4.dev18-9.7 python-cinder-2014.2.4.dev19-9.7 python-glance-11.0.2~a0~dev2-1.1 python-glance-2014.2.4.dev5-9.5 python-heat-2014.2.4.dev13-9.6 python-keystone-2014.2.4.dev5-11.8 python-oslo.i18n-1.3.1-9.6 python-oslo.utils-1.4.0-14.2 python-oslotest-1.2.0-2.5 python-sahara-2014.2.4.dev3-9.5 python-six-1.9.0-9.2 openstack-ceilometer-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-agent-central-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-agent-compute-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-agent-ipmi-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-agent-notification-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-alarm-evaluator-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-alarm-notifier-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-api-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-collector-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 openstack-ceilometer-doc-2014.2.4.dev18-9.11 as a component of SUSE OpenStack Cloud 5 openstack-cinder-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 openstack-cinder-api-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 openstack-cinder-backup-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 openstack-cinder-doc-2014.2.4.dev19-9.12 as a component of SUSE OpenStack Cloud 5 openstack-cinder-scheduler-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 openstack-cinder-volume-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 openstack-glance-2014.2.4.dev5-9.5 as a component of SUSE OpenStack Cloud 5 openstack-glance-doc-2014.2.4.dev5-9.7 as a component of SUSE OpenStack Cloud 5 openstack-heat-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 openstack-heat-api-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 openstack-heat-api-cfn-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 openstack-heat-api-cloudwatch-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 openstack-heat-doc-2014.2.4.dev13-9.8 as a component of SUSE OpenStack Cloud 5 openstack-heat-engine-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 openstack-keystone-2014.2.4.dev5-11.8 as a component of SUSE OpenStack Cloud 5 openstack-keystone-doc-2014.2.4.dev5-11.12 as a component of SUSE OpenStack Cloud 5 openstack-sahara-2014.2.4.dev3-9.5 as a component of SUSE OpenStack Cloud 5 openstack-sahara-api-2014.2.4.dev3-9.5 as a component of SUSE OpenStack Cloud 5 openstack-sahara-doc-2014.2.4.dev3-9.5 as a component of SUSE OpenStack Cloud 5 openstack-sahara-engine-2014.2.4.dev3-9.5 as a component of SUSE OpenStack Cloud 5 openstack-suse-sudo-2014.2-9.2 as a component of SUSE OpenStack Cloud 5 python-ceilometer-2014.2.4.dev18-9.7 as a component of SUSE OpenStack Cloud 5 python-cinder-2014.2.4.dev19-9.7 as a component of SUSE OpenStack Cloud 5 python-glance-2014.2.4.dev5-9.5 as a component of SUSE OpenStack Cloud 5 python-heat-2014.2.4.dev13-9.6 as a component of SUSE OpenStack Cloud 5 python-keystone-2014.2.4.dev5-11.8 as a component of SUSE OpenStack Cloud 5 python-oslo.i18n-1.3.1-9.6 as a component of SUSE OpenStack Cloud 5 python-oslo.utils-1.4.0-14.2 as a component of SUSE OpenStack Cloud 5 python-oslotest-1.2.0-2.5 as a component of SUSE OpenStack Cloud 5 python-sahara-2014.2.4.dev3-9.5 as a component of SUSE OpenStack Cloud 5 python-six-1.9.0-9.2 as a component of SUSE OpenStack Cloud 5 openstack-glance-11.0.2~a0~dev2-1.1 as a component of SUSE OpenStack Cloud 6 python-glance-11.0.2~a0~dev2-1.1 as a component of SUSE OpenStack Cloud 6 OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881. CVE-2014-9684 SUSE OpenStack Cloud 5:openstack-ceilometer-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-agent-central-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-agent-compute-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-agent-ipmi-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-agent-notification-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-alarm-evaluator-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-alarm-notifier-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-api-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-collector-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:openstack-ceilometer-doc-2014.2.4.dev18-9.11 SUSE OpenStack Cloud 5:openstack-cinder-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:openstack-cinder-api-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:openstack-cinder-backup-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:openstack-cinder-doc-2014.2.4.dev19-9.12 SUSE OpenStack Cloud 5:openstack-cinder-scheduler-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:openstack-cinder-volume-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:openstack-glance-2014.2.4.dev5-9.5 SUSE OpenStack Cloud 5:openstack-glance-doc-2014.2.4.dev5-9.7 SUSE OpenStack Cloud 5:openstack-heat-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:openstack-heat-api-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:openstack-heat-api-cfn-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:openstack-heat-api-cloudwatch-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:openstack-heat-doc-2014.2.4.dev13-9.8 SUSE OpenStack Cloud 5:openstack-heat-engine-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:openstack-keystone-2014.2.4.dev5-11.8 SUSE OpenStack Cloud 5:openstack-keystone-doc-2014.2.4.dev5-11.12 SUSE OpenStack Cloud 5:openstack-sahara-2014.2.4.dev3-9.5 SUSE OpenStack Cloud 5:openstack-sahara-api-2014.2.4.dev3-9.5 SUSE OpenStack Cloud 5:openstack-sahara-doc-2014.2.4.dev3-9.5 SUSE OpenStack Cloud 5:openstack-sahara-engine-2014.2.4.dev3-9.5 SUSE OpenStack Cloud 5:openstack-suse-sudo-2014.2-9.2 SUSE OpenStack Cloud 5:python-ceilometer-2014.2.4.dev18-9.7 SUSE OpenStack Cloud 5:python-cinder-2014.2.4.dev19-9.7 SUSE OpenStack Cloud 5:python-glance-2014.2.4.dev5-9.5 SUSE OpenStack Cloud 5:python-heat-2014.2.4.dev13-9.6 SUSE OpenStack Cloud 5:python-keystone-2014.2.4.dev5-11.8 SUSE OpenStack Cloud 5:python-oslo.i18n-1.3.1-9.6 SUSE OpenStack Cloud 5:python-oslo.utils-1.4.0-14.2 SUSE OpenStack Cloud 5:python-oslotest-1.2.0-2.5 SUSE OpenStack Cloud 5:python-sahara-2014.2.4.dev3-9.5 SUSE OpenStack Cloud 5:python-six-1.9.0-9.2 SUSE OpenStack Cloud 6:openstack-glance-11.0.2~a0~dev2-1.1 SUSE OpenStack Cloud 6:python-glance-11.0.2~a0~dev2-1.1 low 4 AV:N/AC:L/Au:S/C:N/I:N/A:P