** Changed in: nova
Status: Fix Committed => Fix Released
** Changed in: nova
Milestone: None => liberty-3
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1387543
Title:
[OSSA 2015-015] Resize/delete combo allows to overload nova-compute
(CVE-2015-3241)
Status in OpenStack Compute (nova):
Fix Released
Status in OpenStack Compute (nova) juno series:
Fix Committed
Status in OpenStack Compute (nova) kilo series:
Fix Committed
Status in OpenStack Security Advisory:
Fix Released
Bug description:
If user create instance, and resize it to larger flavor and than
delete that instance, migration process does not stop. This allow
user to repeat operation many times, causing overload to affected
compute nodes over user quota.
Affected installation: most drastic effect happens on 'raw-disk'
instances without live migration. Whole raw disk (full size of the
flavor) is copied during migration.
If user delete instance it does not terminate rsync/scp keeping disk
backing file opened regardless of removal by nova compute.
Because rsync/scp of large disks is rather slow, it gives malicious
user enough time to repeat that operation few hundred times, causing
disk space depletion on compute nodes, huge impact on management
network and so on.
Proposed solution: abort migration (kill rsync/scp) as soon, as
instance is deleted.
Affected installation: Havana, Icehouse, probably Juno (not tested).
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1387543/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
