CVE-2015-3156: Openstack DBaaS (Trove) Improper Link Resolution Before File Access
(updated )
The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py,MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.
References
- bugs.launchpad.net/trove/+bug/1398195
- bugzilla.redhat.com/show_bug.cgi?id=1216073
- github.com/advisories/GHSA-98c8-36p9-gw66
- github.com/openstack/trove
- github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py
- github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py
- github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py
- github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py
- github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbase_impl.py
- github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py
- github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py
- github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py
- github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysql_impl.py
- github.com/openstack/trove/commit/61774984aa2bacfe89867fc39a402a6a4cfb8f33
- nvd.nist.gov/vuln/detail/CVE-2015-3156
Code Behaviors & Features
Detect and mitigate CVE-2015-3156 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →