CVE-2016-9592

CVE-2016-9592 describes a denial-of-service vulnerability in Red Hat OpenShift versions prior to 3.3.1.11, 3.2.1.23, and 3.4. This flaw occurs when a volume fails to detach, leading to repeated 'VolumeInUse' errors during deletion attempts. The continuous retries every 30 seconds can overwhelm cloud provider APIs, exceeding rate limits and causing a denial of service. Rated with a CVSSv3 score of 4.3 (Medium), the vulnerability has a network attack vector and low attack complexity, requiring low privileges (PR:L) to trigger. The primary impact is limited to availability (A:L), as the system becomes unresponsive due to excessive API requests. There is no evidence of active exploitation, nor are there known public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.