CVE-2015-3280

OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.

• CWE-399

• http://rhn.redhat.com/errata/RHSA-2015-1898.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlThird Party Advisory
• http://www.securityfocus.com/bid/76553Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1392527Third Party Advisory
• https://security.openstack.org/ossa/OSSA-2015-017.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1898.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlThird Party Advisory
• http://www.securityfocus.com/bid/76553Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1392527Third Party Advisory
• https://security.openstack.org/ossa/OSSA-2015-017.htmlVendor Advisory

Published

Oct 26, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3274Cross-site scripting (XSS) vulnerability in the user_get_use…
• CVE-2015-3275Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2015-3276The nss_parse_ciphers function in libraries/libldap/tls_m.c …7.5
• CVE-2015-3277The mod_nss module before 1.0.11 in Fedora allows remote att…
• CVE-2015-3278The cipherstring parsing code in nss_compat_ossl while in mu…
• CVE-2015-3279Integer overflow in filter/texttopdf.c in texttopdf in cups-…
• CVE-2015-3281The buffer_slow_realign function in HAProxy 1.5.x before 1.5…
• CVE-2015-3282vos in OpenAFS before 1.6.13, when updating VLDB entries, al…
• CVE-2015-3283OpenAFS before 1.6.13 allows remote attackers to spoof bos c…
• CVE-2015-3284pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to…
• CVE-2015-3285The pioctl for the OSD FS command in OpenAFS before 1.6.13 u…
• CVE-2015-3286Buffer overflow in the Solaris kernel extension in OpenAFS b…