CVE-2014-0162: OpenStack Image Registry and Delivery… – CVSS 6.0 · Watchpost

← All vulnerabilities

OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

中危 6.0CVE-2014-0162 · GHSA-r7pj-rvwg-vxhr · PYSEC-2026-817 · Published 27/04/2014 · updated 17/06/2026

要点

CVE-2014-0162 是影响 glance, icehouse (openstack), image registry and delivery service (glance) (openstack) 的中危 (CVSS 6.0)漏洞。
未来 30 天内被利用的概率（EPSS）：2.0%，高于 80.8% 的漏洞。
修复：升级到 2013.2.4 或更高版本。

Package	Affected versions	Patched versions
glance PyPI	`≥ 2013.2, < 2013.2.4`	`2013.2.4`
icehouse openstack	`= rc-1`	No fix yet
image registry and delivery service (glance) openstack	`= 2013.2= 2013.2.1= 2013.2.2= 2013.2.3`	No fix yet

Description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

NVD description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

References

nvd.nist.gov/vuln/detail/CVE-2014-0162 · ADVISORY
access.redhat.com/errata/RHSA-2014:0455 · WEB
access.redhat.com/security/cve/CVE-2014-0162 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
launchpad.net/bugs/1298698 · WEB
opendev.org/openstack/glance · PACKAGE
rhn.redhat.com/errata/RHSA-2014-0455.html · WEB
openwall.com/lists/oss-security/2014/04/10/13 · WEB
ubuntu.com/usn/USN-2193-1 · WEB
pypi.org/project/glance · PACKAGE
GitHub Advisory GHSA-r7pj-rvwg-vxhr · ADVISORY

glance 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free