Bug 1378661 (CVE-2016-7498)

Summary:	CVE-2016-7498 openstack-nova: May fail to delete images in resize state regression
Product:	[Other] Security Response	Reporter:	Summer Long <slong>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aortega, apevec, ayoung, berrange, chrisw, cvsbot-xmlrpc, dasmith, eglynn, jschluet, kbasil, kchamart, lhh, lpeer, markmc, nlevinki, rbryant, sbauza, sclewis, sferdjao, sgordon, srevivo, tdecacqu, vromanso
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-09-23 03:41:17 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1378664

Description Summer Long 2016-09-23 02:46:14 UTC

If an authenticated user deletes an instance while it is in resize state, it
will cause the original instance to not be deleted from the compute
node it was running on. An attacker can use this to launch a denial of
service attack. All Nova setups are affected.

Affects 
~~~~~~~ 
- Nova: ==13.0.0 

Patches
~~~~~~~
- https://review.openstack.org/327398 (Mitaka)
- https://review.openstack.org/326262 (Newton)


Credits
~~~~~~~
- Rajesh Tailor from Red Hat (CVE-2016-7498)


References
~~~~~~~~~~
- https://bugs.launchpad.net/bugs/1589821
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7498
Notes
~~~~~
- This bug is similar to OSSA-2015-017 (CVE-2015-3280) and was
  re-introduced in the first release of Mitaka version of Nova and it
  was re-fixed in nova-13.1.0.

Comment 1 Summer Long 2016-09-23 03:27:02 UTC

Statement: This issue only affects version 13.0.0 of openstack-nova, and does not impact any currently released version of Red Hat OpenStack Platform or Red Hat Enterprise Linux OpenStack Platform.