OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nova | Openstack | 2014.2 (including) | 2014.2.4 (excluding) |
| Nova | Openstack | 2015.1.0 (including) | 2015.1.2 (excluding) |