Title: Nova VMware instance leak potentially leading to compute DoS
Reporter: Zhu Zhu (IBM)
Products: Nova
Versions: up to 2014.1.2
Description:
Zhu Zhu from IBM reported a vulnerability in Nova VMware driver. By deleting an instance while it is in re-size state, an authenticated user may leak the original instance and use this to conduct a denial of service attack on compute nodes. All Nova VMware setups are affected.
Here is impact description draft #1:
Title: Nova VMware instance leak potentially leading to compute DoS
Reporter: Zhu Zhu (IBM)
Products: Nova
Versions: up to 2014.1.2
Description:
Zhu Zhu from IBM reported a vulnerability in Nova VMware driver. By deleting an instance while it is in re-size state, an authenticated user may leak the original instance and use this to conduct a denial of service attack on compute nodes. All Nova VMware setups are affected.