OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.
| Score | Percentile |
|---|---|
| 1.97% | 83.52% |
No CVSS scores in this advisory.
| Type | Value |
|---|---|
| GHSA | GHSA-3vx7-xff6-h2vx ↗ |
| CVE | CVE-2015-3241 ↗ |
Vulnerable version ranges and first patched releases as published by GitHub.
| Ecosystem | Package | Vulnerable range | First patched | Vulnerable functions |
|---|---|---|---|---|
| pip | nova | < 12.0.0.0b3 | 112.0.0.0b3 | — |