CVE-2014-3641 | BDVDB-2026-64726 Detail

Description#

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2014-1788.html
http://seclists.org/oss-sec/2014/q4/78
http://www.securityfocus.com/bid/70221
http://www.ubuntu.com/usn/USN-2405-1
https://bugs.launchpad.net/cinder/+bug/1350504
http://rhn.redhat.com/errata/RHSA-2014-1787.html

Exploit#

No public exploit known

History#

Version 12014-10-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.