Executive brief
The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
Affected products
- PyPI glance
Junglewise Threat Intelligence
CVE-2015-8234: PYSEC-2017-143 - The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted
CVE-2015-8234 · Severity: low · CVSS 3 · Published 2017-03-29
Technologies: glance (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- PYSEC-2026-817 - OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
- PYSEC-2026-816 - OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions
- PYSEC-2026-812 - OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service