CVE 2016-0757
OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_
Related bugs and status
CVE-2016-0757 (Candidate) is related to these bugs:
Bug #1525915: [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757)
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1525915 | [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757) | Glance | Undecided | Fix Released | ||
| 1525915 | [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757) | OpenStack Security Advisory | Undecided | Fix Released | ||
| 1525915 | [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757) | Glance kilo | Undecided | Fix Released | ||
| 1525915 | [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757) | Glance liberty | Undecided | Fix Committed | ||
Bug #1539520: [pre-OSSA] Vulnerability in OpenStack Glance (CVE-2016-0757) / Glance image status manipulation through locations removal (OSSA-2016-006)
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1539520 | [pre-OSSA] Vulnerability in OpenStack Glance (CVE-2016-0757) / Glance image status manipulation through locations removal (OSSA-2016-006) | Mirantis OpenStack | Critical | Fix Released | ||
| 1539520 | [pre-OSSA] Vulnerability in OpenStack Glance (CVE-2016-0757) / Glance image status manipulation through locations removal (OSSA-2016-006) | Mirantis OpenStack 8.0.x | Critical | Fix Released | ||
| 1539520 | [pre-OSSA] Vulnerability in OpenStack Glance (CVE-2016-0757) / Glance image status manipulation through locations removal (OSSA-2016-006) | Mirantis OpenStack 7.0.x | Critical | Fix Released | ||
Bug #1990157: OSSN-0090: Malicious image data modification can happen when using COW
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | Glance | Critical | New | ||
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | OpenStack Security Notes | Undecided | In Progress | ||
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | Glance wallaby | Undecided | New | ||
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | Glance yoga | Undecided | New | ||
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | Glance xena | Undecided | New | ||
| 1990157 | OSSN-0090: Malicious image data modification can happen when using COW | Glance zed | Critical | New | ||
See the 
CVE page on Mitre.org
for more details.
