OpenStack Nova host data leak to vm instance in rescue mode

BAJO 3.5CVE-2014-0134 · GHSA-w429-xc55-hc48 · PYSEC-2014-112 · Published 08/05/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
nova PyPI	`< 12.0.0a0`	`12.0.0a0`
compute openstack	`= 2013.2= 2013.2.1= 2013.2.2`	No fix yet

Description

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2014-0134 · ADVISORY
openstack/nova commit 25e761a · WEB
openstack/nova commit d416f43 · WEB
openstack/nova commit dc8de42 · WEB
bugs.launchpad.net/nova/+bug/1221190 · WEB
openstack/nova · PACKAGE
pypa/advisory-database · WEB
openwall.com/lists/oss-security/2014/03/27/6 · WEB
ubuntu.com/usn/USN-2247-1 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free