4
CVE-2014-5356
- EPSS 2.13%
- Veröffentlicht 25.08.2014 14:55:07
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.13% | 0.795 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
http://rhn.redhat.com/errata/RHSA-2014-1337.html
http://rhn.redhat.com/errata/RHSA-2014-1338.html
http://rhn.redhat.com/errata/RHSA-2014-1685.html
http://secunia.com/advisories/60743
http://www.openwall.com/lists/oss-security/2014/08/21/6
http://www.ubuntu.com/usn/USN-2322-1
https://bugs.launchpad.net/glance/+bug/1315321