OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Image_registry_and_delivery_service_(glance) | Openstack | * | 2013.2.3 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2013.2 (including) | 2013.2 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2013.2.1 (including) | 2013.2.1 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2013.2.2 (including) | 2013.2.2 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2014.1 (including) | 2014.1 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2014.1.1 (including) | 2014.1.1 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | 2014.1.2 (including) | 2014.1.2 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | juno-1 (including) | juno-1 (including) |
| Image_registry_and_delivery_service_(glance) | Openstack | juno-2 (including) | juno-2 (including) |
| Ubuntu_linux | Canonical | 14.04 (including) | 14.04 (including) |