CVE-2016-7498: Openstack Compute (nova)

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

Affected products

• Openstack Compute (nova): version 13.0.0 only

Published 2016-09-27. Last modified 2026-06-17.