CVE-2014-9623
OpenStack Glance Bypass the storage quota and Denial of service
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
Exploit likelihood
What each source reports
NVD Score used
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
CVE-2014-9623- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
CVE-2014-9623- Updated
- 2026-11-02
EUVDEUVD-2022-4275 No score
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
EUVD-2022-4275- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j4mh-9wq6-8rg6 No score
OpenStack Glance Bypass the storage quota and Denial of service
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
GHSA-j4mh-9wq6-8rg6- Updated
- 2026-11-02
OSV No score
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
CVE-2014-9623- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-9623 No score
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
DEBIAN-CVE-2014-9623- Updated
- 2026-11-02
OSVGHSA-j4mh-9wq6-8rg6 No score
OpenStack Glance Bypass the storage quota and Denial of service
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
GHSA-j4mh-9wq6-8rg6- Updated
- 2026-11-02
OSVPYSEC-2026-813 No score
OpenStack Glance Bypass the storage quota and Denial of service
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state.
- Record
PYSEC-2026-813- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glancePyPI |
before 11.0.0a0 | 11.0.0a0 |
glanceDebian:12 |
before 2014.1.3-12 | 2014.1.3-12 |
glanceDebian:13 |
before 2014.1.3-12 | 2014.1.3-12 |
glanceDebian:14 |
before 2014.1.3-12 | 2014.1.3-12 |
openstack-glanceRed Hat:openstack:6::el7 |
before 0:2014.2.2-1.el7ost | 0:2014.2.2-1.el7ost |
openstack-glance-docRed Hat:openstack:6::el7 |
before 0:2014.2.2-1.el7ost | 0:2014.2.2-1.el7ost |
python-glanceRed Hat:openstack:6::el7 |
before 0:2014.2.2-1.el7ost | 0:2014.2.2-1.el7ost |
python-glanceclientRed Hat:openstack:6::el7 |
before 1:0.14.2-2.el7ost | 1:0.14.2-2.el7ost |
python-glanceclient-docRed Hat:openstack:6::el7 |
before 1:0.14.2-2.el7ost | 1:0.14.2-2.el7ost |
openstack-glanceRed Hat:openstack:5::el7 |
before 0:2014.1.4-1.el7ost | 0:2014.1.4-1.el7ost |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-glance-docRed Hat:openstack:5::el7 |
before 0:2014.1.4-1.el7ost | 0:2014.1.4-1.el7ost |
python-glanceRed Hat:openstack:5::el7 |
before 0:2014.1.4-1.el7ost | 0:2014.1.4-1.el7ost |
openstack-glanceRed Hat:openstack:5::el6 |
before 0:2014.1.4-1.el6ost | 0:2014.1.4-1.el6ost |
openstack-glance-docRed Hat:openstack:5::el6 |
before 0:2014.1.4-1.el6ost | 0:2014.1.4-1.el6ost |
python-glanceRed Hat:openstack:5::el6 |
before 0:2014.1.4-1.el6ost | 0:2014.1.4-1.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-9623 is a medium vulnerability (CVSS 4.0) in Redhat Openstack, published January 23, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. Fixed in glance 11.0.0a0.
References
rhn.redhat.com/errata/RHSA-2015-0838.html
secunia.com/advisories/62165
oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
bugs.launchpad.net/glance/+bug/1383973
Show 28 moreShow less
openwall.com/lists/oss-security/2015/01/18/4
security.openstack.org/ossa/OSSA-2015-003.html
nvd.nist.gov/vuln/detail/CVE-2014-9623
github.com/openstack/glance/commit/0dc8fbb3479a53c5bba8475d14f4c7206904c5ea
security-tracker.debian.org/tracker/CVE-2014-9623
pypi.org/project/glance
access.redhat.com/errata/RHSA-2015:0644
wiki.openstack.org/wiki/ReleaseNotes/2014.2.2
bugzilla.redhat.com/show_bug.cgi?id=911568
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0644.json
cve.org/CVERecord?id=CVE-2014-9623