Oval Definition:oval:org.opensuse.security:def:201715139
Revision Date:2022-05-22Version:1
Title:CVE-2017-15139
Description:

A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-15139
SUSE-SU-2019:0716-1
Mitre CVE-2017-15139
SUSE CVE-2017-15139
SUSE-SU-2019:0716-1
Platform(s):SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openstack-cinder-9.1.5~dev6-4.21.3 is installed
  • OR openstack-cinder-api-9.1.5~dev6-4.21.3 is installed
  • OR openstack-cinder-backup-9.1.5~dev6-4.21.3 is installed
  • OR openstack-cinder-doc-9.1.5~dev6-4.21.3 is installed
  • OR openstack-cinder-scheduler-9.1.5~dev6-4.21.3 is installed
  • OR openstack-cinder-volume-9.1.5~dev6-4.21.3 is installed
  • OR openstack-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 is installed
  • OR openstack-neutron-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-dhcp-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-doc-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-ha-tool-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-l3-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-lbaas-9.2.2~dev11-4.15.3 is installed
  • OR openstack-neutron-lbaas-agent-9.2.2~dev11-4.15.3 is installed
  • OR openstack-neutron-lbaas-doc-9.2.2~dev11-4.15.3 is installed
  • OR openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-macvtap-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-metadata-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-metering-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-openvswitch-agent-9.4.2~dev21-7.27.3 is installed
  • OR openstack-neutron-server-9.4.2~dev21-7.27.3 is installed
  • OR python-cinder-9.1.5~dev6-4.21.3 is installed
  • OR python-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 is installed
  • OR python-neutron-9.4.2~dev21-7.27.3 is installed
  • OR python-neutron-lbaas-9.2.2~dev11-4.15.3 is installed
  • Definition Synopsis
  • Release Information
  • SUSE OpenStack Cloud 9 is installed
  • OR SUSE OpenStack Cloud Crowbar 9 is installed
  • AND Package Information
  • openstack-cinder is not affected
  • OR openstack-cinder-api is not affected
  • OR openstack-cinder-backup is not affected
  • OR openstack-cinder-scheduler is not affected
  • OR openstack-cinder-volume is not affected
  • OR python-cinder is not affected
  • BACK