Vulnerability CVE-2015-3280

Vulnerability Name:

CVE-2015-3280 (CCN-106083)

Assigned:

2015-09-01

Published:

2015-09-01

Updated:

2023-02-13

Summary:

CVSS v3 Severity:

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2015-3280

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: oss-sec Mailing List, Tue, 1 Sep 2015 20:24:36 +0000
[OSSA 2015-017] Nova may fail to delete images in resize state (CVE-2015-3280)

Source: CCN
Type: IBM Security Bulletin T1022763 (Cloud Manager with Openstack)
Openstack Nova and Neutron vulnerabilities affect IBM Cloud Manager with OpenStack (CVE-2015-5240 CVE-2015-3280)

Source: CCN
Type: IBM Security Bulletin N1021120
IBM PowerVC is impacted by OpenStack Nova denial of service vulnerability (CVE-2015-3280)

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory, VDB Entry
secalert@redhat.com

Source: CCN
Type: OSSA 2015-017
Deleting instance while resize instance is running leads to unuseable compute nodes (CVE-2015-3280)

Source: XF
Type: UNKNOWN
openstack-nova-cve20153280-dos(106083)

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Vendor Advisory
secalert@redhat.com

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2015-3280

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:openstack:nova:2014.2.3:*:*:*:*:*:*:*

OR cpe:/a:openstack:nova:2015.1.1:*:*:*:*:*:*:*

AND

cpe:/a:ibm:cloud_manager:4.1.0:*:*:*:*:openstack:*:*

OR cpe:/a:ibm:cloud_manager:4.2.0:*:*:*:*:openstack:*:*

OR cpe:/a:ibm:cloud_manager:4.3.0:*:*:*:*:openstack:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:55240	P	Security update for libesmtp (Important)	2021-09-02
oval:org.opensuse.security:def:20153280	V	CVE-2015-3280	2021-07-10
oval:org.opensuse.security:def:55923	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:56208	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25148	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:55078	P	cpio on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26311	P	Security update for openstack-nova and openstack-neutron (Moderate)	2020-12-01
oval:org.opensuse.security:def:25580	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:25289	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:25638	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25492	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:55651	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:24876	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:56482	P	Security update for SuSEfirewall2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25067	P	Security update for libjpeg-turbo (Important)	2020-12-01
oval:org.opensuse.security:def:24865	P	Security update for MozillaFirefox, MozillaFirefox-branding-SLE, llvm4, mozilla-nspr, mozilla-nss, apache2-mod_nss (Important)	2020-12-01
oval:org.opensuse.security:def:56601	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:56316	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:25205	P	Security update for ceph (Important)	2020-12-01
oval:org.opensuse.security:def:55100	P	empathy on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25594	P	Security update for targetcli-fb (Moderate)	2020-12-01
oval:org.opensuse.security:def:25439	P	Security update for libpcap (Important)	2020-12-01
oval:org.opensuse.security:def:55478	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:55077	P	coreutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26276	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:56408	P	Security update for gwenhywfar (Moderate)	2020-12-01
oval:org.opensuse.security:def:55757	P	Security update for ldb, samba, talloc, tdb, tevent (Important)	2020-12-01
oval:org.opensuse.security:def:24940	P	Security update for gnome-shell (Moderate)	2020-12-01
oval:org.opensuse.security:def:56520	P	Security update for postgresql96 (Moderate)	2020-12-01
oval:com.ubuntu.precise:def:20153280000	V	CVE-2015-3280 on Ubuntu 12.04 LTS (precise) - medium.	2015-10-26
oval:com.ubuntu.xenial:def:201532800000000	V	CVE-2015-3280 on Ubuntu 16.04 LTS (xenial) - medium.	2015-10-26
oval:com.ubuntu.trusty:def:20153280000	V	CVE-2015-3280 on Ubuntu 14.04 LTS (trusty) - medium.	2015-10-26
oval:com.ubuntu.xenial:def:20153280000	V	CVE-2015-3280 on Ubuntu 16.04 LTS (xenial) - medium.	2015-10-26

BACK