CVE:CVE-2015-1851
CNNVD:CNNVD-201506-515
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。Cinder为其提供块存储服务功能。
OpenStack Cinder中存在安全漏洞。远程攻击者可借助上传的图像中特制的qcow2签名利用该漏洞读取任意文件。以下版本受到影响：OpenStack Cinder 2014.1.5(icehouse)之前版本，2014.2.4(juno)之前2014.2.x版本，2015.1.1(kilo)之前2015.1.x版本。
solution:Upgrade canonical ubuntu_linux to a higher version than 15.04,and avoid the version 15.04; Upgrade openstack icehouse to a higher version than 2014.1.4,and avoid the version (,2014.1.4]; Upgrade openstack juno to a higher version than 2014.2,2014.2.2,2014.2.3,and avoid the version 2014.2,2014.2.2,2014.2.3; Upgrade openstack kilo to a higher version than 2015.1.0,and avoid the version 2015.1.0