CVE-2015-5162
The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image.
- Affected products
- Openstack Cinder, Openstack Glance, Openstack Nova, Ubuntu, Qemu-Img
- Openstack Cinder
- = 7.0.2, 8.0.0, 8.1.0
- Openstack Glance
- ≤ 11.0.0, 11.0.1, 12.0.0
- Openstack Nova
- ≤ 12.0.3, 13.0.0
- Fix
- Available
- CVSS 2.0
- 7.8 HIGH
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 3.1% (86th percentile)
- Weakness
- CWE-399
- NVD status
- Modified
- Published
- 2016-10-07
CVE-2015-5162 at NVD
No indexed exploits for CVE-2015-5162 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2015-5162 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.