CVE-2014-0134

2014-05-0814:29:00

Debian Security Bug Tracker

security-tracker.debian.org

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

48.8%

JSON

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

OSVersionArchitecturePackageVersionFilename
Debian12allnova< 2013.2.2-4nova_2013.2.2-4_all.deb
Debian11allnova< 2013.2.2-4nova_2013.2.2-4_all.deb
Debian10allnova< 2013.2.2-4nova_2013.2.2-4_all.deb
Debian999allnova< 2013.2.2-4nova_2013.2.2-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	nova	< 2013.2.2-4	nova_2013.2.2-4_all.deb
Debian	11	all	nova	< 2013.2.2-4	nova_2013.2.2-4_all.deb
Debian	10	all	nova	< 2013.2.2-4	nova_2013.2.2-4_all.deb
Debian	999	all	nova	< 2013.2.2-4	nova_2013.2.2-4_all.deb