Lucene search

K
nvd[email protected]NVD:CVE-2015-3241
HistorySep 08, 2015 - 3:59 p.m.

CVE-2015-3241

2015-09-0815:59:01
CWE-399
web.nvd.nist.gov
3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

82.0%

OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.

Affected configurations

NVD
Node
openstacknovaRange2014.22014.2.3
OR
openstacknovaRange2015.1.02015.1.1

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

82.0%