Openstack

Icehouse

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2015-1851

  • EPSS 0.51%
  • Veröffentlicht 25.06.2015 16:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

6

CVE-2014-0162

  • EPSS 0.56%
  • Veröffentlicht 27.04.2014 20:55:23
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a ...

6

CVE-2014-0167

  • EPSS 0.38%
  • Veröffentlicht 15.04.2014 14:55:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compu...

7.1

CVE-2013-7130

  • EPSS 2.54%
  • Veröffentlicht 06.02.2014 17:00:06
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attacke...