PT-2014-3492 · Red Hat+2 · Libvirt+2

Stanislaw Pitucha · Published 2014-05-08 · Updated 2022-05-17 · CVE-2014-0134

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Compute (Nova) versions 2013.2 through 2013.2.2 OpenStack Compute (Nova) versions prior to 2014.1 in the Icehouse release

Description The issue allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image when using libvirt to spawn images and use cow images is set to false.

Recommendations For OpenStack Compute (Nova) versions 2013.2 through 2013.2.2, update to version 2013.2.3 or later. For OpenStack Compute (Nova) versions prior to 2014.1 in the Icehouse release, update to version 2014.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-0134

GHSA-W429-XC55-HC48

PYSEC-2014-112

RHSA-2014:0578

USN-2247-1

Affected Products

Openstack Compute

Ubuntu

Libvirt

References · 23

• https://osv.dev/vulnerability/USN-2247-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0167 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-0134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0134 · Security Note
• https://ubuntu.com/security/CVE-2013-6491 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-7130 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-0134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-1068 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w429-xc55-hc48 · Vendor Advisory
• http://ubuntu.com/usn/USN-2247-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2014-112 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-4463 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2247-1 · Vendor Advisory