CVE-2014-3641

Openstack Cinder < 2014.1.2 - Information Disclosure

Title source: rule

Description

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

References (6)

Scores

EPSS 0.0033
EPSS Percentile 55.6%

Classification

CWE
CWE-200
Status draft

Affected Products (3)

openstack/cinder < 2014.1.2
openstack/cinder
pypi/cinder < 2014.1.3PyPI

Timeline

Published Oct 08, 2014
Tracked Since Feb 18, 2026