CVE-2016-7498

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

• CWE-399

• http://www.openwall.com/lists/oss-security/2016/09/21/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/23/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93068Third Party Advisory, VDB Entry
• https://security.openstack.org/ossa/OSSA-2016-011.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/09/21/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/23/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93068Third Party Advisory, VDB Entry
• https://security.openstack.org/ossa/OSSA-2016-011.htmlPatch, Vendor Advisory

Published

Sep 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7492Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7493Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7494Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7495Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7496Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7497Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7499The sbr_make_f_master function in aacsbr.c in Libav 11.7 all…
• CVE-2016-7502The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFm…
• CVE-2016-7504A use-after-free vulnerability was observed in Rp_toString f…
• CVE-2016-7505A buffer overflow vulnerability was observed in divby functi…
• CVE-2016-7506An out-of-bounds read vulnerability was observed in Sp_repla…
• CVE-2016-7507Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90…