CVE-2014-5356

{"id": "CVE-2014-5356", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-08-25T14:55:07.160", "references": [{"url": "http://rhn.redhat.com/errata/RHSA-2014-1337.html", "source": "cve@mitre.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1338.html", "source": "cve@mitre.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1685.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/60743", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/08/21/6", "source": "cve@mitre.org"}, {"url": "http://www.ubuntu.com/usn/USN-2322-1", "source": "cve@mitre.org"}, {"url": "https://bugs.launchpad.net/glance/+bug/1315321", "source": "cve@mitre.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1337.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1338.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1685.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/60743", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2014/08/21/6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/USN-2322-1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugs.launchpad.net/glance/+bug/1315321", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image."}, {"lang": "es", "value": "OpenStack Image Registry and Delivery Service (Glance) anterior a 2013.2.4, 2014.x anterior a 2014.1.3, y Juno anterior a Juno-3, cuando utiliza la API V2, no aplica debidamente la opci\u00f3n de configuraci\u00f3n image_size_cap, lo que permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (el consumo del disco) mediante la subida de un imagen grande."}], "lastModified": "2024-11-21T02:11:54.813", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB2930CB-FAC9-4283-81A2-33CB02AE0463", "versionEndIncluding": "2013.2.3"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2013.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5187A73A-0D13-442E-AC27-D995B652F184"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2013.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20E946F4-A78D-4444-8418-AB44F93FE603"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2013.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46675930-1B59-4379-8D53-65791B674633"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2014.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D25939A0-128A-422D-8AA4-82ABF48701EE"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2014.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49917050-28EC-4C2E-B318-32108332AC4C"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2014.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF99F800-FFCA-423E-94DF-CF4E762B7E92"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):juno-1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "200CFA26-EBA7-425A-86EC-C13855382C6A"}, {"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):juno-2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F3FFF72-B308-41EF-A807-255235CED49D"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}