CVE-2016-7498

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-27 · updated 2026-06-17
Weakness: CWE-399

Description

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

Affected products

OpenStack Compute (Nova): 13.0.0

References

http://www.openwall.com/lists/oss-security/2016/09/21/8
http://www.openwall.com/lists/oss-security/2016/09/23/1
http://www.securityfocus.com/bid/93068
https://security.openstack.org/ossa/OSSA-2016-011.html
http://www.openwall.com/lists/oss-security/2016/09/21/8
http://www.openwall.com/lists/oss-security/2016/09/23/1
http://www.securityfocus.com/bid/93068
https://security.openstack.org/ossa/OSSA-2016-011.html

Get alerted when CVE-2016-7498 or the next vulnerability affects your stack