Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0134
HistoryMay 08, 2014 - 12:00 a.m.

CVE-2014-0134

2014-05-0800:00:00
ubuntu.com
ubuntu.com
9

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

48.8%

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3
and Icehouse before 2014.1, when using libvirt to spawn images and
use_cow_images is set to false, allows remote authenticated users to read
certain compute host files by overwriting an instance disk with a crafted
image.

Bugs

Notes

Author Note
jdstrand 1:2013.2.3-0ubuntu1 is now in saucy-updates introduced in grizzly
OSVersionArchitecturePackageVersionFilename
ubuntu13.10noarchnova< 1:2013.2.3-0ubuntu1.2UNKNOWN

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

48.8%