CVE-2015-5162
Fixed in a distro release EPSS 3%
The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image.
Products: openstack cinder, openstack glance, openstack nova
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cinder | 7.0.2 |
| PyPI | cinder | 9.0.0 |
| PyPI | glance | 14.0.0 |
| PyPI | nova | 12.0.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cinder | 2:8.0.0-1 |
| Debian 12 | glance | 2:12.0.0-1 |
| Debian 12 | nova | 2:13.0.0-1 |
| Debian 13 | cinder | 2:8.0.0-1 |
| Debian 13 | glance | 2:12.0.0-1 |
| Debian 13 | nova | 2:13.0.0-1 |
| Debian 14 | cinder | 2:8.0.0-1 |
| Debian 14 | nova | 2:13.0.0-1 |
| Red Hat openstack 5 | openstack-cinder | 0:2014.1.5-9.el7ost |
| Red Hat openstack 5 | openstack-cinder | 0:2014.1.5-9.el6ost |
| Red Hat openstack 5 | openstack-cinder-doc | 0:2014.1.5-9.el6ost |
| Red Hat openstack 5 | openstack-cinder-doc | 0:2014.1.5-9.el7ost |
| Red Hat openstack 5 | python-cinder | 0:2014.1.5-9.el7ost |
| Red Hat openstack 5 | python-cinder | 0:2014.1.5-9.el6ost |
| Red Hat openstack 6 | openstack-cinder | 0:2014.2.4-11.el7ost |
| Red Hat openstack 6 | openstack-cinder-doc | 0:2014.2.4-11.el7ost |
| Red Hat openstack 6 | python-cinder | 0:2014.2.4-11.el7ost |
| Red Hat openstack 7 | openstack-cinder | 0:2015.1.3-12.el7ost |
| Red Hat openstack 7 | openstack-cinder-doc | 0:2015.1.3-12.el7ost |
| Red Hat openstack 7 | openstack-glance | 0:2015.1.2-3.el7ost |
| Red Hat openstack 7 | openstack-glance-doc | 0:2015.1.2-3.el7ost |
| Red Hat openstack 7 | openstack-nova | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-api | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-cells | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-cert | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-common | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-compute | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-conductor | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-console | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-doc | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-network | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-novncproxy | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-objectstore | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-scheduler | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-serialproxy | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | openstack-nova-spicehtml5proxy | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | python-cinder | 0:2015.1.3-12.el7ost |
| Red Hat openstack 7 | python-glance | 0:2015.1.2-3.el7ost |
| Red Hat openstack 7 | python-nova | 0:2015.1.4-32.el7ost |
| Red Hat openstack 7 | python-oslo-concurrency | 0:1.8.2-2.el7ost |
| Red Hat openstack 7 | python-oslo-concurrency-doc | 0:1.8.2-2.el7ost |
| Red Hat openstack 8 | openstack-cinder | 1:7.0.3-1.el7ost |
| Red Hat openstack 8 | openstack-glance | 1:11.0.1-6.el7ost |
| Red Hat openstack 8 | openstack-nova | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-api | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-cells | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-cert | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-common | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-compute | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-conductor | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-console | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-network | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-novncproxy | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-objectstore | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-scheduler | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-serialproxy | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | openstack-nova-spicehtml5proxy | 1:12.0.5-9.el7ost |
| Red Hat openstack 8 | python-cinder | 1:7.0.3-1.el7ost |
| Red Hat openstack 8 | python-glance | 1:11.0.1-6.el7ost |
| Red Hat openstack 8 | python-nova | 1:12.0.5-9.el7ost |
| Red Hat openstack 9 | openstack-cinder | 1:8.1.1-4.el7ost |
| Red Hat openstack 9 | openstack-glance | 1:12.0.0-2.el7ost |
| Red Hat openstack 9 | python-cinder | 1:8.1.1-4.el7ost |
| Red Hat openstack 9 | python-cinder-tests | 1:8.1.1-4.el7ost |
| Red Hat openstack 9 | python-glance | 1:12.0.0-2.el7ost |
| Red Hat openstack 9 | python-glance-tests | 1:12.0.0-2.el7ost |
| Ubuntu 14.04 LTS | nova | 1:2014.1.5-0ubuntu1.7 |