CVE-2014-3641

2014-10-0819:55:03

Debian Security Bug Tracker

security-tracker.debian.org

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

60.3%

JSON

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

OSVersionArchitecturePackageVersionFilename
Debian12allcinder< 2014.1.3-1cinder_2014.1.3-1_all.deb
Debian11allcinder< 2014.1.3-1cinder_2014.1.3-1_all.deb
Debian999allcinder< 2014.1.3-1cinder_2014.1.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cinder	< 2014.1.3-1	cinder_2014.1.3-1_all.deb
Debian	11	all	cinder	< 2014.1.3-1	cinder_2014.1.3-1_all.deb
Debian	999	all	cinder	< 2014.1.3-1	cinder_2014.1.3-1_all.deb