CVE-2016-4383 The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified imag...
HighCVSS 8.4
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glance(Debian:12) | All versions | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u1 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u2 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u3 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u5 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-3 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-3+deb12u1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-4 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0~rc1-1 | No fix listed |
Show 87 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glance(Debian:12) | = 2:29.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:13) | All versions | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3+deb13u1 | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3+deb13u2 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:14) | All versions | No fix listed |
| debian/glance(Debian:14) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-3 | No fix listed |
| HP Inc helion openstack glance | All versions | No fix listed |
References
- Debian Security Tracker CVE-2016-4383 vendor-advisory
- 93106 third-party-advisory vdb-entry
- bugs.launchpad.net issue-tracking third-party-advisory vdb-entry
- h20566.www2.hpe.com mitigation vendor-advisory
- wiki.openstack.org technical-description third-party-advisory
- bugs.debian.org issue-tracking