Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2014-0162

openstack-glance: remote code execution in Glance Sheepdog backend

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

CVSS 2.0 · 6.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Icehouse Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-0167

openstack-nova: RBAC policy not properly enforced in Nova EC2 API

The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.

CVSS 2.0 · 6.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Icehouse Openstack
CVE-2015-1851

openstack-cinder: Host file disclosure through qcow2 backing file

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Icehouse Juno and 2 more
CVE-2013-7130

nova: Live migration can leak root disk into ephemeral storage

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

CVSS 2.0 · 7.1 High EPSS 2.4% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Grizzly Havana and 2 more