CVE-2014-5356
25.08.2014, 14:55
OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openstack | image_registry_and_delivery_service_\(glance\) | 𝑥 ≤ 2013.2.3 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2013.2 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2013.2.1 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2013.2.2 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2014.1 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2014.1.1 |
| openstack | image_registry_and_delivery_service_\(glance\) | 2014.1.2 |
| canonical | ubuntu_linux | 14.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References