CVE:CVE-2015-5295
CNNVD:CNNVD-201601-373
OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。
OpenStack Orchestration API (Heat) 2015.1.3 (kilo)之前版本、5.0.x版本至5.0.1 (liberty)之前版本存在缓冲区错误漏洞。远程攻击者利用该漏洞导致系统拒绝服务（内存损坏），或确定本地存在的文件。
solution:Upgrade openstack orchestration_api to a higher version than 5.0.1,2015.1.3,and avoid the version [5.0.0,5.0.1),[2015.1.0,2015.1.3); Upgrade redhat openstack to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 23,and avoid the version 23; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3