CVE-2014-0162: Input Validation
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0162?
CVE-2014-0162 is rated as a high severity vulnerability due to the potential for remote command execution.
How do I fix CVE-2014-0162?
To fix CVE-2014-0162, upgrade OpenStack Glance to version 2013.2.4 or later, or icehouse to icehouse-rc2 or later.
Who is affected by CVE-2014-0162?
CVE-2014-0162 affects users of OpenStack Image Registry and Delivery Service (Glance) versions prior to 2013.2.4 and icehouse prior to icehouse-rc2.
What types of attacks can exploit CVE-2014-0162?
CVE-2014-0162 can be exploited by remote authenticated users to execute arbitrary commands on the server.
What is the vulnerable component in CVE-2014-0162?
The vulnerable component in CVE-2014-0162 is the Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance).