EUVD-2015-5272

Malware in sbrugna...

CVE-2015-5295: Improper Restriction of Operations within the Bounds of a Memory Buffer

The template-validate command in OpenStack Orchestration API Heat before 2015.1.3 kilo and 5.0.x before 5.0.1 liberty allows remote authenticated users to cause a denial of service memory consumption or determine the existence of local files via the resource type in a template, as demonstrated by...