CVE-2015-3289

Name of the Vulnerable Software and Affected Versions OpenStack Glance versions prior to 2015.1.1 (kilo)

Description The issue allows remote authenticated users to cause a denial of service by consuming disk space. This is achieved by repeatedly using the import task flow API to create images and then deleting them.

Recommendations For versions prior to 2015.1.1 (kilo), update to version 2015.1.1 (kilo) or later to resolve the issue. As a temporary workaround, consider restricting access to the import task flow API to minimize the risk of exploitation.