[Openstack-security] [Bug 1175193] Re: Instance actions history is unbounded
Andrew Laski
andrew.laski at rackspace.com
Tue Mar 4 18:57:10 UTC 2014
Moving to medium since I have not seen any reports of issues with this,
nor have I seen this cropping up in a large deployment I help maintain.
** Changed in: nova
Importance: High => Medium
** Changed in: nova
Assignee: Andrew Laski (alaski) => (unassigned)
--
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1175193
Title:
Instance actions history is unbounded
Status in OpenStack Compute (Nova):
Confirmed
Bug description:
Grizzly included a new feature to keep a history of actions performed
on an instance. The history kept in the database is unbounded. As a
result, a malicious user could perform actions in a loop and cause the
database to grow without bounds. Some of the quicker actions that
could be used to exploit this are pause, unpause, or change password.
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1175193/+subscriptions
More information about the Openstack-security
mailing list