p PatchFirst

CVE-2015-1851

CVE-2015-1851

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

EPSS 2.6% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cinder Debian:12

    Affected ranges
    • ECOSYSTEM: < 2015.1.0+2015.06.16.git26.9634b76ba5-1

    Update to 2015.1.0+2015.06.16.git26.9634b76ba5-1

  • cinder Debian:13

    Affected ranges
    • ECOSYSTEM: < 2015.1.0+2015.06.16.git26.9634b76ba5-1

    Update to 2015.1.0+2015.06.16.git26.9634b76ba5-1

  • cinder Debian:14

    Affected ranges
    • ECOSYSTEM: < 2015.1.0+2015.06.16.git26.9634b76ba5-1

    Update to 2015.1.0+2015.06.16.git26.9634b76ba5-1

  • cinder PyPI

    Affected ranges
    • ECOSYSTEM: < 7.0.0a0

    Update to 7.0.0a0

Original sources

Check your server →