CVE Tools
Sign in

CVE-2015-5162

The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow atta...

Published: Oct 7, 2016Updated: May 6, 2026 Sources: CVE List NVD GHSACWE-399
NVD MITRE
7.5CVSSHIGH
EPSS Score
3.1%
Top 14.0%
CISA KEV
Not in KEV
Exploits
1 Known
Remediation
Patch Available

Description

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:NI:NA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:NConfidentiality
None
I:NIntegrity
None
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-399

Affected Products

cinderPyPIOSS Libraries
glancePyPIOSS Libraries
novaPyPIOSS Libraries
n/an/a
cinderopenstack
On-prem
Cloud & SaaS / cloud-platform
pypipackage-ecosystemOSS Libraries
openstackoss-projectUSCloud & SaaSaka openstack foundation
and 2 more affected products View all →

Exploitability

1 exploit source identified

Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.

View exploit details
Official Patch Available

References

https://nvd.nist.gov/vuln/detail/CVE-2015-5162
nvd.nist.gov
https://github.com/openstack/cinder/commit/455b318ced717fb38dfe40014817d78fbc47dea5
github.com
https://github.com/openstack/glance/commit/69a9b659fd48aa3c1f84fc7bc9ae236b6803d31f
github.com
and 12 more references View all →

Timeline

Published
Oct 7, 2016
Last Updated
May 6, 2026

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2015-5162 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows