This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2015-7945 →
DEBIAN-CVE-2015-7945
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13...
Original description
The description as published by the source.
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
ganeti
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2-1"}]}]
Debian:13
ganeti
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2-1"}]}]
References
- advisory security-tracker.debian.org