Описание
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | openstack-glance | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | openstack-glance | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | openstack-glance | Not affected | ||
| Red Hat OpenStack Platform 13 (Queens) | openstack-glance | Out of support scope | ||
| Red Hat OpenStack Platform 16.2 | openstack-glance | Out of support scope | ||
| Red Hat OpenStack Platform 17.1 | openstack-glance | Out of support scope | ||
| Red Hat OpenStack Platform 18.0 | openstack-glance | Fix deferred | ||
| Red Hat OpenStack Platform 8 (Liberty) | openstack-glance | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-327
https://bugzilla.redhat.com/show_bug.cgi?id=1303486openstack-glance: MD5 used for cryptographic signature verification
EPSS
Процентиль: 70%
0.01262
Низкий
2.4 Low
CVSS2
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 9 лет назад
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
CVSS3: 5.5
nvd
больше 9 лет назад
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
CVSS3: 5.5
debian
больше 9 лет назад
The image signature algorithm in OpenStack Glance 11.0.0 allows remote ...
CVSS3: 5.5
altlinux
почти 11 лет назад
ALT-PU-2015-2863: package `openstack-glance` update to version 11.0.1-alt1
EPSS
Процентиль: 70%
0.01262
Низкий
2.4 Low
CVSS2