CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5162

The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.054

EPSS Ranking 89.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 7.8

References

Products affected by CVE-2015-5162

Openstack » Cinder » Version: 7.0.2

cpe:2.3:a:openstack:cinder:7.0.2
Openstack » Cinder » Version: 8.0.0

cpe:2.3:a:openstack:cinder:8.0.0
Openstack » Cinder » Version: 8.1.0

cpe:2.3:a:openstack:cinder:8.1.0
Openstack » Glance » Version: 0.1.7

cpe:2.3:a:openstack:glance:0.1.7
Openstack » Glance » Version: 1.0

cpe:2.3:a:openstack:glance:1.0
Openstack » Glance » Version: 11.0.0

cpe:2.3:a:openstack:glance:11.0.0
Openstack » Glance » Version: 11.0.1

cpe:2.3:a:openstack:glance:11.0.1
Openstack » Glance » Version: 12.0.0

cpe:2.3:a:openstack:glance:12.0.0
Openstack » Glance » Version: 2.0

cpe:2.3:a:openstack:glance:2.0
Openstack » Nova » Version: N/A

cpe:2.3:a:openstack:nova:-
Openstack » Nova » Version: 0.9.0

cpe:2.3:a:openstack:nova:0.9.0
Openstack » Nova » Version: 12.0.0

cpe:2.3:a:openstack:nova:12.0.0
Openstack » Nova » Version: 12.0.1

cpe:2.3:a:openstack:nova:12.0.1
Openstack » Nova » Version: 12.0.2

cpe:2.3:a:openstack:nova:12.0.2
Openstack » Nova » Version: 12.0.3

cpe:2.3:a:openstack:nova:12.0.3
Openstack » Nova » Version: 13.0.0

cpe:2.3:a:openstack:nova:13.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5162

Products

Pricing

Contact Us