CVEs-PoC/2015/CVE-2015-3280.md

CVE-2015-3280

Description

OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Github

No PoCs found on GitHub currently.