OSSA-2016-011: Nova may fail to delete images in resize state regression

Date:

September 21, 2016

CVE:

CVE-2016-7498

Affects

• Nova: ==13.0.0

Description

Rajesh Tailor from Red Hat reported a vulnerability in Nova. If an authenticated user deletes an instance while it is in resize state, it will cause the original instance to not be deleted from the compute node it was running on. An attacker can use this to launch a denial of service attack. All Nova setups are affected.

Patches

• https://review.openstack.org/327398 (Mitaka)

• https://review.openstack.org/326262 (Newton)

Credits

• Rajesh Tailor from Red Hat (CVE-2016-7498)

References

• https://bugs.launchpad.net/bugs/1589821

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7498

Notes

• This bug is similar to OSSA-2015-017 (CVE-2015-3280) and was re- introduced in the first release of Mitaka version of Nova and it was re-fixed in nova-13.1.0.