CVE-2015-5295 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-5295 Interim 1 10 2025-11-05T04:46:34Z current 2021-05-30T13:31:59Z 2025-11-05T04:46:34Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-5295 The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud 5 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 openstack-heat openstack-heat-5.0.2~a0~dev9-1.4 openstack-heat-api openstack-heat-api-5.0.2~a0~dev9-1.4 openstack-heat-api-cfn openstack-heat-api-cfn-5.0.2~a0~dev9-1.4 openstack-heat-api-cloudwatch openstack-heat-api-cloudwatch-5.0.2~a0~dev9-1.4 openstack-heat-engine openstack-heat-engine-5.0.2~a0~dev9-1.4 openstack-heat-plugin-heat_docker openstack-heat-plugin-heat_docker-5.0.2~a0~dev9-1.4 openstack-heat-test python-heat python-heat-5.0.2~a0~dev9-1.4 openstack-heat-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cfn-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cloudwatch-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat-engine-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat-plugin-heat_docker-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 python-heat-5.0.2~a0~dev9-1.4 as a component of SUSE OpenStack Cloud 6 openstack-heat as a component of SUSE Cloud 5 openstack-heat as a component of SUSE OpenStack Cloud 6 openstack-heat-api as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cfn as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cloudwatch as a component of SUSE OpenStack Cloud 6 openstack-heat-engine as a component of SUSE OpenStack Cloud 6 openstack-heat-plugin-heat_docker as a component of SUSE OpenStack Cloud 6 python-heat as a component of SUSE OpenStack Cloud 6 openstack-heat as a component of SUSE OpenStack Cloud 7 openstack-heat-api as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cfn as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cloudwatch as a component of SUSE OpenStack Cloud 7 openstack-heat-engine as a component of SUSE OpenStack Cloud 7 openstack-heat-plugin-heat_docker as a component of SUSE OpenStack Cloud 7 openstack-heat-test as a component of SUSE OpenStack Cloud 7 python-heat as a component of SUSE OpenStack Cloud 7 The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero. CVE-2015-5295 SUSE OpenStack Cloud 6:openstack-heat-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:openstack-heat-api-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:openstack-heat-api-cfn-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:openstack-heat-engine-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker-5.0.2~a0~dev9-1.4 SUSE OpenStack Cloud 6:python-heat-5.0.2~a0~dev9-1.4 SUSE Cloud 5:openstack-heat SUSE OpenStack Cloud 6:openstack-heat SUSE OpenStack Cloud 6:openstack-heat-api SUSE OpenStack Cloud 6:openstack-heat-api-cfn SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch SUSE OpenStack Cloud 6:openstack-heat-engine SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker SUSE OpenStack Cloud 6:python-heat SUSE OpenStack Cloud 7:openstack-heat SUSE OpenStack Cloud 7:openstack-heat-api SUSE OpenStack Cloud 7:openstack-heat-api-cfn SUSE OpenStack Cloud 7:openstack-heat-api-cloudwatch SUSE OpenStack Cloud 7:openstack-heat-engine SUSE OpenStack Cloud 7:openstack-heat-plugin-heat_docker SUSE OpenStack Cloud 7:openstack-heat-test SUSE OpenStack Cloud 7:python-heat low 4 AV:N/AC:L/Au:S/C:N/I:N/A:P 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L