What is GHSA-5gp5-vxj6-4257?

GHSA-5gp5-vxj6-4257 is a security advisory published by GitHub Security Advisories with Low severity. OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability

Which CVE IDs does GHSA-5gp5-vxj6-4257 cover?

GHSA-5gp5-vxj6-4257 covers the following CVE IDs: CVE-2022-4134. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5gp5-vxj6-4257?

GHSA-5gp5-vxj6-4257 has a CVSS v3 base score of 2.8, published by GitHub Security Advisories.

Which products are affected by GHSA-5gp5-vxj6-4257?

GHSA-5gp5-vxj6-4257 affects 1 product, including: pip/glance:\u003c= 25.1.0.

GHSA-5gp5-vxj6-4257LowCVSS 2.8

OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability

Vendor

GitHub Security Advisories

Published

March 7, 2023

Last Modified

November 22, 2024

🔗 CVE IDs covered (1)

CVE-2022-4134 →

📋 Description

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

🎯 Affected products1

pip/glance:<= 25.1.0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2022-4134
https://bugs.launchpad.net/glance/+bug/1990157
https://bugzilla.redhat.com/show_bug.cgi?id=2147462
https://wiki.openstack.org/wiki/OSSN/OSSN-0090
https://nvd.nist.gov/vuln/detail/CVE-2016-0757
https://github.com/pypa/advisory-database/tree/main/vulns/glance/PYSEC-2023-270.yaml
https://github.com/advisories/GHSA-5gp5-vxj6-4257