CVE-2014-5356

    Dashboard / Vulnerabilities / CVE-2014-5356

    CVE-2014-5356

    Published: 25 Aug 2014Last Modified: 7 Jul 2026

    Summary:

    Details: OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.

    References: http://rhn.redhat.com/errata/RHSA-2014-1337.html, http://rhn.redhat.com/errata/RHSA-2014-1338.html, http://rhn.redhat.com/errata/RHSA-2014-1685.html, http://secunia.com/advisories/60743, http://www.ubuntu.com/usn/USN-2322-1, http://www.openwall.com/lists/oss-security/2014/08/21/6, https://bugs.launchpad.net/glance/+bug/1315321

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High