OpenStack Compute (nova)

nova delete of vm being rescued leads to *-rescue VM leak

Bug #1283138 reported by Jaroslav Henner on 2014-02-21

This bug report is a duplicate of: Bug #1269418: [OSSA 2014-017] nova rescue doesn't put VM into RESCUE status on vmware (CVE-2014-2573). Edit Remove

258

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Compute (nova)	New	Undecided	Unassigned
	OpenStack Security Advisory	New	Undecided	Unassigned

Bug Description

the VSphere driver is able to create an rescue VM, but fails to delete the VM_ID-rescue image from the VSphere when nova delete is issued. The VM is though deleted from the OpenStack.

Note there is #1269418 about not setting the VM to RESCUE state.

I believe this is a security bug because it can lead to overfilling the VSPhere.

Tags:

Revision history for this message

Jaroslav Henner (jhenner) wrote on 2014-02-21:

https://bugzilla.redhat.com/show_bug.cgi?id=1068698

Thierry Carrez (ttx) on 2014-02-24

affects:

tempest → nova

Revision history for this message

Thierry Carrez (ttx) wrote on 2014-02-24:

Looks like https://bugs.launchpad.net/nova/+bug/1269418

Since the cat is mostly out of the bag I propose we mark this bug as a duplicate of the above one, and fix that bug publicly there instead of embargoing the fix here. Any objection ?

Thierry Carrez (ttx) on 2014-03-03

information type:

Private Security → Public Security

Report a bug

This report contains Public Security information

Everyone can see this security related information.

Duplicate of bug #1269418 Remove

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

redhat-bugs #1068698 Edit

Bug watches keep track of this bug in other bug trackers.