PYSEC-2014-112

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/nova/PYSEC-2014-112.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2014-112
Aliases
Published
2014-05-08T14:29:00Z
Modified
2024-11-25T22:42:06Z
Summary
[none]
Details

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

References

Affected packages

PyPI / nova

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.0.0a0

Database specific

source
"https://github.com/pypa/advisory-database/blob/main/vulns/nova/PYSEC-2014-112.yaml"