Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2015-8234 →
DEBIAN-CVE-2015-8234
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, whi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
glance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
glance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
glance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org