Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/openstack-cinder@2014.1.4-1.1?arch=el7ost
purl pkg:rpm/redhat/openstack-cinder@2014.1.4-1.1?arch=el7ost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ggmm-svqw-bkhv
Aliases:
CVE-2015-1851
GHSA-9hcj-h2qc-689p
OpenStack Cinder file disclosure in image convert OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:40:47.850033+00:00 RedHat Importer Affected by VCID-ggmm-svqw-bkhv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1851.json 38.0.0