// For flags

CVE-2014-0162

openstack-glance: remote code execution in Glance Sheepdog backend

Severity Score

6.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

El backend Sheepdog en OpenStack Image Registry and Delivery Service (Glance) 2013.2 anterior a 2013.2.4 y icehouse anterior a icehouse-rc2 permite a usuarios remotos autenticados con permiso insertar o modificar un imagen para ejecutar comandos arbitrarios a través de una localización manipulada.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2013-12-03 CVE Reserved
  • 2014-04-27 CVE Published
  • 2023-07-12 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openstack
Search vendor "Openstack"
Icehouse
Search vendor "Openstack" for product "Icehouse"
rc-1
Search vendor "Openstack" for product "Icehouse" and version "rc-1"
-
Affected
Openstack
Search vendor "Openstack"
Image Registry And Delivery Service \(glance\)
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)"
2013.2
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)" and version "2013.2"
-
Affected
Openstack
Search vendor "Openstack"
Image Registry And Delivery Service \(glance\)
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)"
2013.2.1
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)" and version "2013.2.1"
-
Affected
Openstack
Search vendor "Openstack"
Image Registry And Delivery Service \(glance\)
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)"
2013.2.2
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)" and version "2013.2.2"
-
Affected
Openstack
Search vendor "Openstack"
Image Registry And Delivery Service \(glance\)
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)"
2013.2.3
Search vendor "Openstack" for product "Image Registry And Delivery Service \(glance\)" and version "2013.2.3"
-
Affected