CVE-2017-15139 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-15139 Interim 1 25 2022-11-27T01:24:21Z current 2021-05-30T14:03:00Z 2022-11-27T01:24:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-15139 A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-March/005229.html E-Mail link for SUSE-SU-2019:0716-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 HPE Helion OpenStack Cloud 8 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openstack-cinder openstack-cinder-9.1.5~dev6-4.21.3 openstack-cinder-api openstack-cinder-api-9.1.5~dev6-4.21.3 openstack-cinder-backup openstack-cinder-backup-9.1.5~dev6-4.21.3 openstack-cinder-doc-9.1.5~dev6-4.21.3 openstack-cinder-scheduler openstack-cinder-scheduler-9.1.5~dev6-4.21.3 openstack-cinder-volume openstack-cinder-volume-9.1.5~dev6-4.21.3 openstack-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 openstack-neutron-9.4.2~dev21-7.27.3 openstack-neutron-dhcp-agent-9.4.2~dev21-7.27.3 openstack-neutron-doc-9.4.2~dev21-7.27.3 openstack-neutron-ha-tool-9.4.2~dev21-7.27.3 openstack-neutron-l3-agent-9.4.2~dev21-7.27.3 openstack-neutron-lbaas-9.2.2~dev11-4.15.3 openstack-neutron-lbaas-agent-9.2.2~dev11-4.15.3 openstack-neutron-lbaas-doc-9.2.2~dev11-4.15.3 openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.27.3 openstack-neutron-macvtap-agent-9.4.2~dev21-7.27.3 openstack-neutron-metadata-agent-9.4.2~dev21-7.27.3 openstack-neutron-metering-agent-9.4.2~dev21-7.27.3 openstack-neutron-openvswitch-agent-9.4.2~dev21-7.27.3 openstack-neutron-server-9.4.2~dev21-7.27.3 python-cinder python-cinder-9.1.5~dev6-4.21.3 python-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 python-neutron-9.4.2~dev21-7.27.3 python-neutron-lbaas-9.2.2~dev11-4.15.3 openstack-cinder-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder-api-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder-backup-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder-doc-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder-scheduler-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder-volume-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 openstack-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-dhcp-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-doc-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-ha-tool-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-l3-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-lbaas-9.2.2~dev11-4.15.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-lbaas-agent-9.2.2~dev11-4.15.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-lbaas-doc-9.2.2~dev11-4.15.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-macvtap-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-metadata-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-metering-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-openvswitch-agent-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-server-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 python-cinder-9.1.5~dev6-4.21.3 as a component of SUSE OpenStack Cloud 7 python-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 as a component of SUSE OpenStack Cloud 7 python-neutron-9.4.2~dev21-7.27.3 as a component of SUSE OpenStack Cloud 7 python-neutron-lbaas-9.2.2~dev11-4.15.3 as a component of SUSE OpenStack Cloud 7 openstack-cinder as a component of HPE Helion OpenStack 8 openstack-cinder-api as a component of HPE Helion OpenStack 8 openstack-cinder-backup as a component of HPE Helion OpenStack 8 openstack-cinder-scheduler as a component of HPE Helion OpenStack 8 openstack-cinder-volume as a component of HPE Helion OpenStack 8 python-cinder as a component of HPE Helion OpenStack 8 openstack-cinder as a component of HPE Helion OpenStack Cloud 8 openstack-cinder as a component of SUSE OpenStack Cloud 8 openstack-cinder-api as a component of SUSE OpenStack Cloud 8 openstack-cinder-backup as a component of SUSE OpenStack Cloud 8 openstack-cinder-scheduler as a component of SUSE OpenStack Cloud 8 openstack-cinder-volume as a component of SUSE OpenStack Cloud 8 python-cinder as a component of SUSE OpenStack Cloud 8 openstack-cinder as a component of SUSE OpenStack Cloud 9 openstack-cinder-api as a component of SUSE OpenStack Cloud 9 openstack-cinder-backup as a component of SUSE OpenStack Cloud 9 openstack-cinder-scheduler as a component of SUSE OpenStack Cloud 9 openstack-cinder-volume as a component of SUSE OpenStack Cloud 9 python-cinder as a component of SUSE OpenStack Cloud 9 openstack-cinder as a component of SUSE OpenStack Cloud Crowbar 8 openstack-cinder-api as a component of SUSE OpenStack Cloud Crowbar 8 openstack-cinder-backup as a component of SUSE OpenStack Cloud Crowbar 8 openstack-cinder-scheduler as a component of SUSE OpenStack Cloud Crowbar 8 openstack-cinder-volume as a component of SUSE OpenStack Cloud Crowbar 8 python-cinder as a component of SUSE OpenStack Cloud Crowbar 8 openstack-cinder as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-api as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-backup as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-scheduler as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-volume as a component of SUSE OpenStack Cloud Crowbar 9 python-cinder as a component of SUSE OpenStack Cloud Crowbar 9 A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants. CVE-2017-15139 SUSE OpenStack Cloud 7:openstack-cinder-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-cinder-api-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-cinder-backup-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-cinder-doc-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-cinder-scheduler-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-cinder-volume-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:openstack-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-lbaas-9.2.2~dev11-4.15.3 SUSE OpenStack Cloud 7:openstack-neutron-lbaas-agent-9.2.2~dev11-4.15.3 SUSE OpenStack Cloud 7:openstack-neutron-lbaas-doc-9.2.2~dev11-4.15.3 SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:python-cinder-9.1.5~dev6-4.21.3 SUSE OpenStack Cloud 7:python-horizon-plugin-designate-ui-3.0.2~dev1-3.9.3 SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.27.3 SUSE OpenStack Cloud 7:python-neutron-lbaas-9.2.2~dev11-4.15.3 HPE Helion OpenStack 8:openstack-cinder HPE Helion OpenStack 8:openstack-cinder-api HPE Helion OpenStack 8:openstack-cinder-backup HPE Helion OpenStack 8:openstack-cinder-scheduler HPE Helion OpenStack 8:openstack-cinder-volume HPE Helion OpenStack 8:python-cinder HPE Helion OpenStack Cloud 8:openstack-cinder SUSE OpenStack Cloud 8:openstack-cinder SUSE OpenStack Cloud 8:openstack-cinder-api SUSE OpenStack Cloud 8:openstack-cinder-backup SUSE OpenStack Cloud 8:openstack-cinder-scheduler SUSE OpenStack Cloud 8:openstack-cinder-volume SUSE OpenStack Cloud 8:python-cinder SUSE OpenStack Cloud 9:openstack-cinder SUSE OpenStack Cloud 9:openstack-cinder-api SUSE OpenStack Cloud 9:openstack-cinder-backup SUSE OpenStack Cloud 9:openstack-cinder-scheduler SUSE OpenStack Cloud 9:openstack-cinder-volume SUSE OpenStack Cloud 9:python-cinder SUSE OpenStack Cloud Crowbar 8:openstack-cinder SUSE OpenStack Cloud Crowbar 8:openstack-cinder-api SUSE OpenStack Cloud Crowbar 8:openstack-cinder-backup SUSE OpenStack Cloud Crowbar 8:openstack-cinder-scheduler SUSE OpenStack Cloud Crowbar 8:openstack-cinder-volume SUSE OpenStack Cloud Crowbar 8:python-cinder SUSE OpenStack Cloud Crowbar 9:openstack-cinder SUSE OpenStack Cloud Crowbar 9:openstack-cinder-api SUSE OpenStack Cloud Crowbar 9:openstack-cinder-backup SUSE OpenStack Cloud Crowbar 9:openstack-cinder-scheduler SUSE OpenStack Cloud Crowbar 9:openstack-cinder-volume SUSE OpenStack Cloud Crowbar 9:python-cinder moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N