NVD

Id
26490  
Name
CVE-2015-5295  
Description
The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-01-20  
Modified Date
2016-12-05  
Seq
2015-5295  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140096 26490 CVE-2015-5295 FEDORA-2016-fe5b9da308  View
140097 26490 CVE-2015-5295 RHSA-2016:0266  View
140098 26490 CVE-2015-5295 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
140099 26490 CVE-2015-5295 81438  View
140100 26490 CVE-2015-5295 https://bugs.launchpad.net/heat/+bug/1496277  View
140101 26490 CVE-2015-5295 https://security.openstack.org/ossa/OSSA-2016-003.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11515 JVNDB-2015-006835 OpenStack Orchestration API の template-validate コマンドにおけるサービス運用妨害 (DoS) の脆弱性 OpenStack Orchestration API (Heat) の template-validate コマンドには、サービス運用妨害 (メモリ消費) 状態にされる、またはローカルファイルの存在を特定される脆弱性が存在します。 CVE-2015-5295 82520 CVE-2015-5295 26490 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006835.html 2015-09-16 2016-01-26 View