PyPI/nova CVE-2015-5162: high 7.5, EPSS 3.09%
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Action: Upgrade nova to 12.0.4 or later.
pip install nova==12.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.4 | - |
Fixed versions
| 12.0.4 |
Sources
- osv: PYSEC-2026-871
- https://nvd.nist.gov/vuln/detail/CVE-2015-5162
- https://github.com/openstack/cinder/commit/455b318ced717fb38dfe40014817d78fbc47dea5
- https://github.com/openstack/glance/commit/69a9b659fd48aa3c1f84fc7bc9ae236b6803d31f
- https://github.com/openstack/nova/commit/6bc37dcceca823998068167b49aec6def3112397
- https://access.redhat.com/security/cve/CVE-2015-5162
- https://bugzilla.redhat.com/show_bug.cgi?id=1268303
- https://launchpad.net/bugs/1449062
- http://rhn.redhat.com/errata/RHSA-2016-2923.html
- http://rhn.redhat.com/errata/RHSA-2016-2991.html
- http://rhn.redhat.com/errata/RHSA-2017-0153.html
- http://rhn.redhat.com/errata/RHSA-2017-0156.html
- http://rhn.redhat.com/errata/RHSA-2017-0165.html
- http://rhn.redhat.com/errata/RHSA-2017-0282.html
- http://www.openwall.com/lists/oss-security/2016/10/06/8
- http://www.securityfocus.com/bid/76849
- https://pypi.org/project/nova
- https://github.com/advisories/GHSA-g2j5-7vgx-6xrx
CVE-2015-5162 · published · modified · JSON