GitHub Advisoryadvisory · PyPI

GHSA-r7pj-rvwg-vxhr OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

MEDIUM Published 2022-05-17 Modified 2023-02-08 Official page ↗
Aliases
CVE-2014-0162
Ecosystem
PyPI
Packages
glance
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2023-02-08

Affected packages

• PyPI glance: >= 2013.2, < 2013.2.4 → fixed in 2013.2.4

Description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Related

Alias · CVE (1)

  • CVE-2014-0162 The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References