Skip to content
OpenAdvisories
Unscored USN-2322-1 1 CVE

glance vulnerability

Published Aug 21, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not
properly honor the image_size_cap configuration option. A remote
authenticated attacker could exploit this to cause a denial of service via
disk consumption.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS glance 1:2014.1.2-0ubuntu1.1

Vulnerabilities 1

  • Medium —
    CVE-2014-5356

    OpenStack Glance improper validation of the image_size_cap configuration option

    OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause …

    glance glance glance Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2014-5356