This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-4383 →

DEBIAN-CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users...

Original description

The description as published by the source.

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glance

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 glance

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 glance

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org