Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-5286

Fixed in a distro release EPSS 2%

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.

Published 2015-10-26 · CVE record · OSV

Products: openstack image_registry_and_delivery_service_(glance)

Fixed upstream

EcosystemPackageFixed in
PyPIglance2014.2.4
PyPIglance2015.1.2

Distro releases

ReleasePackageFixed in
Chainguardopenstack-glance-2025.10
Chainguardopenstack-glance-2025.1-fips0
Chainguardopenstack-glance-2025.20
Chainguardopenstack-glance-2025.2-fips0
Chainguardopenstack-glance-2026.10
Chainguardopenstack-glance-2026.1-fips0
Chainguardopenstack-glance-2026.20
Chainguardopenstack-glance-2026.2-fips0
Debian 12glance1:11.0.0-1
Debian 13glance1:11.0.0-1
Red Hat openstack 5openstack-glance0:2014.1.5-3.el6ost
Red Hat openstack 5openstack-glance0:2014.1.5-3.el7ost
Red Hat openstack 5openstack-glance-doc0:2014.1.5-3.el6ost
Red Hat openstack 5openstack-glance-doc0:2014.1.5-3.el7ost
Red Hat openstack 5python-glance0:2014.1.5-3.el6ost
Red Hat openstack 5python-glance0:2014.1.5-3.el7ost
Red Hat openstack 6openstack-glance0:2014.2.3-3.el7ost
Red Hat openstack 6openstack-glance-doc0:2014.2.3-3.el7ost
Red Hat openstack 6python-glance0:2014.2.3-3.el7ost
Red Hat openstack 7openstack-glance0:2015.1.1-3.el7ost
Red Hat openstack 7openstack-glance-doc0:2015.1.1-3.el7ost
Red Hat openstack 7python-glance0:2015.1.1-3.el7ost
SUSE OpenStack Cloud 5openstack-glance2014.2.4.juno-14.1
SUSE OpenStack Cloud 5openstack-glance-doc2014.2.4.juno-14.1
Ubuntu 14.04 LTSglance1:2014.1.5-0ubuntu1.1