Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-5286
HistoryOct 26, 2015 - 12:00 a.m.

CVE-2015-5286

2015-10-2600:00:00
ubuntu.com
ubuntu.com
11

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before
2015.1.2 (kilo) allows remote authenticated users to bypass the storage
quota and cause a denial of service (disk consumption) by deleting images
that are being uploaded using a token that expires during the process.
NOTE: this vulnerability exists because of an incomplete fix for
CVE-2014-9623.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchglance< 1:2014.1.5-0ubuntu1.1UNKNOWN

Related

prion 2
osv 1
cve 2
debiancve 2
github 1
redhat 4
veracode 2
ubuntucve 1
ibm 2
openvas 1
nessus 1
ubuntu 1
prion
prion
Design/Logic Flaw
2015-10-26 17:59:00
Design/Logic Flaw
2015-01-23 15:59:00
osv
osv
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
2022-05-17 03:44:52
cve
cve
CVE-2015-5286
2015-10-26 17:59:00
CVE-2014-9623
2015-01-23 15:59:00
debiancve
debiancve
CVE-2015-5286
2015-10-26 17:59:00
CVE-2014-9623
2015-01-23 15:59:00
github
github
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
2022-05-17 03:44:52
redhat
redhat
(RHSA-2015:0644) Low: openstack-glance security and bug fix update
2015-03-05 00:00:00
(RHSA-2015:0837) Low: openstack-glance security and bug fix update
2015-04-16 00:00:00
(RHSA-2015:0838) Low: openstack-glance security and bug fix update
2015-04-16 13:12:57
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:05:21
Denial Of Service
2019-05-02 05:18:59
ubuntucve
ubuntucve
CVE-2014-9623
2015-01-23 00:00:00
ibm
ibm
Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry (CVE-2015-7713, CVE-2015-5286)
2020-07-19 00:49:12
Security Bulletin: OpenStack vulnerabilities affect IBM Cloud Manager with Openstack (CVE-2015-7713, CVE-2015-5286)
2018-08-08 04:13:55
openvas
openvas
Ubuntu: Security Advisory (USN-3446-1)
2017-10-12 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)
2017-10-12 00:00:00
ubuntu
ubuntu
OpenStack Glance vulnerabilities
2017-10-11 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON
Related for UB:CVE-2015-5286
prion2osv1cve2debiancve2github1redhat4veracode2ubuntucve1ibm2openvas1nessus1ubuntu1