Unscored CVE-2016-4383 EUVD-2016-5383GHSA-9hm8-vxr3-42xr

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenti…

Published Jun 27, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: glance Package: glance Ecosystem: Debian Ecosystem: Ubuntu

Description

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	glance	No fix yet	—
Debian 13	glance	No fix yet	—
Debian 12	glance	No fix yet	—

Ubuntu