The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and     icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an     image to execute arbitrary commands via a crafted location. (CVE-2014-0162)

Note that Nessus relies on the presence of the package as reported by the vendor.

Update to upstream 2013.2.4 Merge spec from el6-icehouse Security fix for CVE-2014-5356

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

OpenStack Security Advisory: 2014-012 CVE: CVE-2014-0162 Date: April 10, 2014 Title: Remote code execution in Glance Sheepdog backend Reporter: Paul McMillan (Nebula) Products: Glance Versions: from 2013.2 to 2013.2.3

Description: Paul McMillan from Nebula reported a vulnerability in Glance Sheepdog backend. By using a specially crafted location, a user allowed to insert or modify Glance image metadata may trigger code execution on the Glance host as the user the Glance service runs under. This may result in Glance host unauthorized access and further compromise of the Glance service. All setups using Glance server with the (enabled by default) sheepdog backend are affected.

Juno (development branch) fix: https://review.openstack.org/86622

Icehouse (milestone-proposed branch) fix:
https://review.openstack.org/86625

Havana fix: https://review.openstack.org/86626

Notes: This fix will be included in the icehouse-rc2 development milestone and in a future 2013.2.4 release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Paul McMillan discovered that the Sheepdog backend in OpenStack Glance did not properly handle untrusted input. A remote authenticated attacker exploit this to execute arbitrary commands as the glance user.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
218363	Linux Distros Unpatched Vulnerability : CVE-2014-0162	Nessus	Misc.	critical
78564	Fedora 20 : openstack-glance-2013.2.4-1.fc20 (2014-11697)	Nessus	Fedora Local Security Checks	medium
73972	Fedora 20 : openstack-glance-2013.2.3-3.fc20 (2014-5198)	Nessus	Fedora Local Security Checks	medium
73883	Ubuntu 13.10 : glance vulnerability (USN-2193-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2014-0162

critical

Tenable Plugins

critical

medium

medium

medium