PyPI/cinder CVE-2015-5162: high 7.5, EPSS 3.09%
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Action: Upgrade cinder to 7.0.2 or later.
pip install cinder==7.0.2pip install cinder==9.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.2 | - |
| 8.0.0 | 9.0.0 | - |
Fixed versions
| 7.0.2 | 9.0.0 |
Sources
- osv: GHSA-g2j5-7vgx-6xrx
- https://nvd.nist.gov/vuln/detail/CVE-2015-5162
- https://github.com/openstack/cinder/commit/455b318ced717fb38dfe40014817d78fbc47dea5
- https://github.com/openstack/glance/commit/69a9b659fd48aa3c1f84fc7bc9ae236b6803d31f
- https://github.com/openstack/nova/commit/6bc37dcceca823998068167b49aec6def3112397
- https://access.redhat.com/security/cve/CVE-2015-5162
- https://bugzilla.redhat.com/show_bug.cgi?id=1268303
- https://launchpad.net/bugs/1449062
- http://rhn.redhat.com/errata/RHSA-2016-2923.html
- http://rhn.redhat.com/errata/RHSA-2016-2991.html
- http://rhn.redhat.com/errata/RHSA-2017-0153.html
- http://rhn.redhat.com/errata/RHSA-2017-0156.html
- http://rhn.redhat.com/errata/RHSA-2017-0165.html
- http://rhn.redhat.com/errata/RHSA-2017-0282.html
- http://www.openwall.com/lists/oss-security/2016/10/06/8
- http://www.securityfocus.com/bid/76849
CVE-2015-5162 · published · modified · JSON