Test ID:	1.3.6.1.4.1.25623.1.0.843333
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3446-1)
Summary:	The remote host is missing an update for the 'glance' package(s) announced via the USN-3446-1 advisory.
Description:	Summary: The remote host is missing an update for the 'glance' package(s) announced via the USN-3446-1 advisory. Vulnerability Insight: Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change the status of images, contrary to access restrictions. (CVE-2015-5251) Mike Fedosin and Alexei Galkin discovered that OpenStack Glance incorrectly handled the storage quota. A remote authenticated user could use this issue to consume disk resources, leading to a denial of service. (CVE-2015-5286) Erno Kuvaja discovered that OpenStack Glance incorrectly handled the show_multiple_locations option. When show_multiple_locations is enabled, a remote authenticated user could change an image status and upload new image data. (CVE-2016-0757) Affected Software/OS: 'glance' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5251 RHSA-2015:1897 http://rhn.redhat.com/errata/RHSA-2015-1897.html https://bugs.launchpad.net/bugs/1482371 https://security.openstack.org/ossa/OSSA-2015-019.html Common Vulnerability Exposure (CVE) ID: CVE-2015-5286 76943 http://www.securityfocus.com/bid/76943 https://bugs.launchpad.net/bugs/1498163 https://security.openstack.org/ossa/OSSA-2015-020.html Common Vulnerability Exposure (CVE) ID: CVE-2016-0757 82696 http://www.securityfocus.com/bid/82696 RHSA-2016:0309 http://rhn.redhat.com/errata/RHSA-2016-0309.html https://security.openstack.org/ossa/OSSA-2016-006.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.