OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

MEDIUM 6.0CVE-2014-0162 · GHSA-r7pj-rvwg-vxhr · PYSEC-2026-817 · Published 27/04/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
glance PyPI	`≥ 2013.2, < 2013.2.4`	`2013.2.4`
icehouse openstack	`= rc-1`	No fix yet
image registry and delivery service (glance) openstack	`= 2013.2= 2013.2.1= 2013.2.2= 2013.2.3`	No fix yet

Description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2014-0162 · ADVISORY
access.redhat.com/errata/RHSA-2014:0455 · WEB
access.redhat.com/security/cve/CVE-2014-0162 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
launchpad.net/bugs/1298698 · WEB
opendev.org/openstack/glance · PACKAGE
rhn.redhat.com/errata/RHSA-2014-0455.html · WEB
openwall.com/lists/oss-security/2014/04/10/13 · WEB
ubuntu.com/usn/USN-2193-1 · WEB
pypi.org/project/glance · PACKAGE
GitHub Advisory GHSA-r7pj-rvwg-vxhr · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free