CVE-2016-7498

https://notcve.org/view.php?id=CVE-2016-7498

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression. OpenStack Compute (nova) 13.0.0 no elimina adecuadamente instancias desde nodos de cómputo, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de disco) mediante la eliminación de instancias durante el estado de cambio de tamaño. NOTA: esta vulnerabilidad existe debido a una regresión de CVE-2015-3280. • http://www.openwall.com/lists/oss-security/2016/09/21/8 http://www.openwall.com/lists/oss-security/2016/09/23/1 http://www.securityfocus.com/bid/93068 https://security.openstack.org/ossa/OSSA-2016-011.html • CWE-399: Resource Management Errors •