CVE-2015-5163 OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
Authenticated users can read arbitrary files via crafted qcow2 images in OpenStack Glance V2 API.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5163?
CVE-2015-5163 is a low-severity path traversal vulnerability in n/a, published on 19 Aug 2015. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.
Weakness: CWE-200
Which versions are affected by CVE-2015-5163?
3 open source packages ship an affected version, including glance. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
glance PyPI | From 2015.1.0 | 2015.1.2 |
glance PyPI | From 2015.1.0 | 2015.1.2 |
glance PyPI | From 2015.1.0 | 2015.1.2 |
Linux distribution packages (3)
openstack-glance Red Hat:openstack:7::el7 | All versions | 0:2015.1.0-6.el7ost.1 |
openstack-glance-doc Red Hat:openstack:7::el7 | All versions | 0:2015.1.0-6.el7ost.1 |
python-glance Red Hat:openstack:7::el7 | All versions | 0:2015.1.0-6.el7ost.1 |
Products include Openstack Glance.
How do I fix CVE-2015-5163?
Upgrade glance to 2015.1.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2015-5163 being exploited?
There is no known exploitation of CVE-2015-5163 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2015-5163, GHSA-q73f-vjc2-3gqf, PYSEC-2015-39, RHSA-2015:1639.