CVE-2014-5356

The CVE-2014-5356 vulnerability affects OpenStack Image Registry and Delivery Service (Glance) prior to 2013.2.4, 2014.x prior to 2014.1.3, and Juno prior to Juno-3 when using the V2 API. The root cause is that the image_size_cap option was not honored, allowing an authenticated remote user to up...

CVE-2014-0162

CVE-2014-0162 affects the Sheepdog backend used by OpenStack Image Registry and Delivery Service (Glance). The vulnerability allows remote authenticated users who can insert or modify an image to run arbitrary commands via a crafted image location. Affected releases are Glance 2013.2 prior to 201...

CVE-2014-1948

CVE-2014-1948 affects OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 through 2013.2.1 and Icehouse era before icehouse-2, where a failed authentication with WARNING-level logging enables local users to read a log entry containing the Swift store backend password. The vulne...