affected:
- package:
    ecosystem: PyPI
    name: glance
    purl: pkg:pypi/glance
  ranges:
  - events:
    - introduced: '0'
    - last_affected: 11.0.0
    type: ECOSYSTEM
aliases:
- CVE-2015-8234
- GHSA-wmhw-fvg9-87fc
details: The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers
  to bypass the signature verification process via a crafted image, which triggers
  an MD5 collision.
id: PYSEC-2017-143
modified: '2024-11-25T18:35:18.357593Z'
published: '2017-03-29T14:59:00Z'
references:
- type: WEB
  url: https://wiki.openstack.org/wiki/OSSN/OSSN-0061
- type: REPORT
  url: https://bugs.launchpad.net/glance/+bug/1516031
- type: FIX
  url: https://bugs.launchpad.net/glance/+bug/1516031
- type: WEB
  url: https://bugs.launchpad.net/glance/+bug/1516031
- type: ARTICLE
  url: http://seclists.org/oss-sec/2015/q4/303
- type: WEB
  url: http://seclists.org/oss-sec/2015/q4/303
severity:
- score: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
  type: CVSS_V3