CVE-2015-3241
A denial of service flaw was found in the OpenStack Compute (nova) instance migration process. Because the migration process does not terminate when an instance is deleted, an authenticated user could bypass user quota and deplete all available disk space by repeatedly re-sizing and deleting an instance.
Find out more about CVE-2015-3241 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 2.7 |
|---|---|
| Base Metrics | AV:A/AC:L/Au:S/C:N/I:N/A:P |
| Access Vector | Adjacent Network |
| Access Complexity | Low |
| Authentication | Single |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 (openstack-nova) | RHSA-2015:1898 | 2015-10-15 |
| Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 (openstack-nova) | RHSA-2015:1898 | 2015-10-15 |
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 (openstack-nova) | RHSA-2015:1898 | 2015-10-15 |
| Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 (openstack-nova) | RHSA-2015:1898 | 2015-10-15 |
| Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 (openstack-nova) | RHSA-2015:1723 | 2015-09-03 |