Vulnerabilities > CVE-2016-7498 - Resource Management Errors vulnerability in Openstack Compute (Nova) 13.0.0

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
openstack
CWE-399

Summary

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

Vulnerable Configurations

Part Description Count
Application
Openstack
1

Common Weakness Enumeration (CWE)