PT-2014-3508 · Openstack · Openstack Image Registry/Delivery Service

Paul Mcmillan + 1 · Published 2014-04-27 · Updated 2023-02-13 · CVE-2014-0162

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2

Description The issue allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Recommendations For OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4, update to version 2013.2.4 or later. For OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2, update to version icehouse-rc2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-0162

GHSA-R7PJ-RVWG-VXHR

RHSA-2014:0455

USN-2193-1

Affected Products

Openstack Image Registry/Delivery Service

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2014-0162 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-0162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0162 · Vendor Advisory
• http://ubuntu.com/usn/USN-2193-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r7pj-rvwg-vxhr · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0455.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-0162 · Security Note
• https://osv.dev/vulnerability/CVE-2014-0162 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0162 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0162 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2193-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2014:0455 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1085163 · Note
• https://access.redhat.com/security/cve/CVE-2014-0162 · Note
• https://launchpad.net/bugs/1298698 · Note