Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-1851
HistoryJun 25, 2015 - 4:59 p.m.

CVE-2015-1851

2015-06-2516:59:00
Debian Security Bug Tracker
security-tracker.debian.org
8

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

EPSS

0.002

Percentile

64.4%

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

OSVersionArchitecturePackageVersionFilename
Debian12allcinder< 2015.1.0+2015.06.16.git26.9634b76ba5-1cinder_2015.1.0+2015.06.16.git26.9634b76ba5-1_all.deb
Debian11allcinder< 2015.1.0+2015.06.16.git26.9634b76ba5-1cinder_2015.1.0+2015.06.16.git26.9634b76ba5-1_all.deb
Debian999allcinder< 2015.1.0+2015.06.16.git26.9634b76ba5-1cinder_2015.1.0+2015.06.16.git26.9634b76ba5-1_all.deb

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

EPSS

0.002

Percentile

64.4%