NVD

Id
25131  
Name
CVE-2015-3241  
Description
OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-09-08  
Modified Date
2016-12-02  
Seq
2015-3241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132914 25131 CVE-2015-3241 RHSA-2015:1723  View
132915 25131 CVE-2015-3241 RHSA-2015:1898  View
132916 25131 CVE-2015-3241 75372  View
132917 25131 CVE-2015-3241 https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml  View
132918 25131 CVE-2015-3241 https://launchpad.net/bugs/1387543  View
132919 25131 CVE-2015-3241 https://security.openstack.org/ossa/OSSA-2015-015.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9348 JVNDB-2015-004668 OpenStack Compute におけるサービス運用妨害 (DoS) の脆弱性 OpenStack Compute (nova) は、インスタンスが削除される際、マイグレーションプロセスを停止しないため、サービス運用妨害 (ディスク、ネットワーク、および他のリソースの消費) 状態にされる脆弱性が存在します。 CVE-2015-3241 80466 CVE-2015-3241 25131 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004668.html 2015-09-03 2015-10-30 View