Lucene search
Ubuntu.comUB:CVE-2014-0162HistoryApr 27, 2014 - 12:00 a.m.
CVE-2014-0162
2014-04-2700:00:00
ubuntu.com
ubuntu.com
15
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
The Sheepdog backend in OpenStack Image Registry and Delivery Service
(Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows
remote authenticated users with permission to insert or modify an image to
execute arbitrary commands via a crafted location.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0162>
- <https://launchpad.net/bugs/1298698>
Notes
| Author | Note |
|---|---|
| jdstrand | fixed in 1:2013.2.3-0ubuntu1 in saucy-updates. Needs a no-change rebuild for saucy-security |
Related
github
github
prion
prion
Authentication flaw
2014-04-27 20:55:00
nessus
nessus
Ubuntu 13.10 : glance vulnerability (USN-2193-1)
2014-05-06 00:00:00
Fedora 20 : openstack-glance-2013.2.3-3.fc20 (2014-5198)
2014-05-13 00:00:00
Fedora 20 : openstack-glance-2013.2.4-1.fc20 (2014-11697)
2014-10-20 00:00:00
cve
cve
CVE-2014-0162
2014-04-27 20:55:00
redhat
redhat
(RHSA-2014:0455) Important: openstack-glance security update
2014-04-30 00:00:00
openvas
openvas
Ubuntu Update for glance USN-2193-1
2014-05-12 00:00:00
Ubuntu Update for glance USN-2193-1
2014-05-12 00:00:00
Fedora Update for openstack-glance FEDORA-2014-11697
2014-10-19 00:00:00
securityvulns
securityvulns
[USN-2193-1] OpenStack Glance vulnerability
2014-05-07 00:00:00
OpenStack multiple security vulnerabilities
2014-05-07 00:00:00
debiancve
debiancve
CVE-2014-0162
2014-04-27 20:55:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:01:49
osv
osv
ubuntu
ubuntu
OpenStack Glance vulnerability
2014-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-glance-2013.2.4-1.fc20
2014-10-18 16:59:05
[SECURITY] Fedora 20 Update: openstack-glance-2013.2.3-3.fc20
2014-05-13 05:03:44
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
Related for UB:CVE-2014-0162