CVE-2015-7944: The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11....

Security readout for executives and security teams

CVE-2015-7944 is a denial-of-service issue in Ganeti’s REST control interface when SSL is enabled. An attacker who can reach ganeti-rapi may force expensive SSL renegotiation and consume resources, potentially disrupting management access to virtualization clusters. The bundle names fixed Ganeti branch releases, but gives no CVSS score or active exploitation evidence. Exposure is limited to organizations running outdated Ganeti with the RESTful control interface enabled in SSL mode. Risk is higher if ganeti-rapi is reachable from user, partner, or internet-facing networks rather than isolated management networks. Systems not using Ganeti or not exposing SSL-mode RAPI are not indicated as affected. Treat as a priority for environments that still run Ganeti and expose RAPI. It is not described as data theft or code execution, but management-plane DoS can impair virtualization operations. If Ganeti is not in use, this should be a low-effort asset-confirmation item. Mitigation focus: Upgrade Ganeti to the fixed release for the deployed branch.; Apply Debian security updates where Ganeti is installed from Debian packages.; Restrict ganeti-rapi access to trusted management networks or VPN paths..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.