CVE-2014-0162
Fixed in a distro release EPSS 2%
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Products: openstack icehouse, openstack image_registry_and_delivery_service_(glance)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | glance | 2013.2.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glance | 2014.1-1 |
| Debian 13 | glance | 2014.1-1 |
| Red Hat openstack 4 | openstack-glance | 0:2013.2.2-3.el6ost |
| Red Hat openstack 4 | openstack-glance-doc | 0:2013.2.2-3.el6ost |
| Red Hat openstack 4 | python-glance | 0:2013.2.2-3.el6ost |