Tushar Patil

**Name of the Vulnerable Software and Affected Versions** OpenStack Compute (nova) versions before 2014.2.4 (juno) OpenStack Compute (nova) versions 2015.1.x before 2015.1.2 (kilo) **Description** The issue allows remote authenticated users to cause a denial of service, specifically disk consumption, by deleting instances while they are in the resize state. This occurs because OpenStack Compute (nova) does not properly delete instances from compute nodes. **Recommendations** For versions before 2014.2.4 (juno), update to version 2014.2.4 or later to resolve the issue. For versions 2015.1.x before 2015.1.2 (kilo), update to version 2015.1.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OpenStack Glance versions 2014.2.x through 2014.2.1 OpenStack Glance version 2014.1.3 and earlier **Description** The issue allows remote authenticated users to bypass the storage quota, causing a denial of service due to disk consumption. This occurs when an image in the saving state is deleted. **Recommendations** For OpenStack Glance versions 2014.2.x through 2014.2.1, update to a version that fixes the quota bypass issue to prevent denial of service. For OpenStack Glance version 2014.1.3 and earlier, update to a version that fixes the quota bypass issue to prevent denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.