CVE-2014-0134

OpenStack Compute (Nova) <2013.2.3-2014.1 - Info Disclosure

Title source: llm

Description

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

References (3)

Scores

EPSS 0.0020
EPSS Percentile 42.0%

Classification

CWE
CWE-200
Status draft

Affected Products (4)

openstack/compute
openstack/compute
openstack/compute
pypi/nova < 12.0.0a0PyPI

Timeline

Published May 08, 2014
Tracked Since Feb 18, 2026