VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 16, 2018· Updated Jun 17, 2026

CVE-2016-9592

CVE-2016-9592

Description

openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Red Hat/Openshift4 versions
    cpe:2.3:a:redhat:openshift:3.2.1.23:*:*:*:enterprise:*:*:*+ 3 more
    • cpe:2.3:a:redhat:openshift:3.2.1.23:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:redhat:openshift:3.3.1.11:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*
    • (no CPE)range: <3.3.1.11, <3.2.1.23, <3.4
  • unspecified/openshiftv5
    Range: openshift 3.3.1.11

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.