Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pypa / glance/PYSEC-2026-812
Advisory ID pypa/glance/PYSEC-2026-812
Aliases CVE-2015-5286
GHSA-gvjg-r9fv-7qx9
PYSEC-2026-812
Summary OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
https://bugs.launchpad.net/bugs/1498163
https://bugzilla.redhat.com/show_bug.cgi?id=1267516
https://opendev.org/openstack/glance
https://pypi.org/project/glance
https://security.openstack.org/ossa/OSSA-2015-020.html
https://web.archive.org/web/20200228024859/http://www.securityfocus.com/bid/76943
CVE-2015-5286 https://access.redhat.com/security/cve/CVE-2015-5286
CVE-2015-5286 https://nvd.nist.gov/vuln/detail/CVE-2015-5286
GHSA-gvjg-r9fv-7qx9 https://github.com/advisories/GHSA-gvjg-r9fv-7qx9
RHSA-2015:1897 https://access.redhat.com/errata/RHSA-2015:1897
RHSA-2015-1897.html https://rhn.redhat.com/errata/RHSA-2015-1897.html

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.