The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1787 advisory.

    OpenStack Block Storage (cinder) manages block storage mounting and the     presentation of such mounted block storage to instances. The backend     physical storage can consist of local disks, or Fiber Channel, iSCSI, and     NFS mounts attached to Compute nodes. In addition, Block Storage supports     volume backups, and snapshots for temporary save and restore operations.
    Programatic management is available via Block Storages API.

    A flaw was found in the GlusterFS and Linux smbfs drivers for OpenStack     Block Storage. A remote attacker could use this flaw to disclose an     arbitrary file from the cinder-volume host to a virtual instance by cloning     and attaching a volume with a malicious qcow2 header. (CVE-2014-3641)

    Red Hat would like to thank the OpenStack project for reporting this issue.
    Upstream acknowledges Duncan Thomas from Hewlett Packard as the original     reporter.

    The openstack-cinder packages have been upgraded to upstream version     2014.1.3, which provides a number of bug fixes over the previous version.
    (BZ#1149750)

    All users of openstack-cinder are advised to upgrade to these updated     packages, which correct these issues. After installing the updated     packages, the cinder running services will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f4a94232-7864-4afb-bbf9-ff2dc8e288d1 advisory.

  - The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote     authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with     a crafted qcow2 header. (CVE-2014-3641)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2405-1 advisory.

    Duncan Thomas discovered that OpenStack Cinder did not properly track the file format when using the     GlusterFS of Smbfs drivers. A remote authenticated user could exploit this to potentially obtain file     contents from the compute host. (CVE-2014-3641)

    Amrith Kumar discovered that OpenStack Cinder did not properly sanitize log message contents. Under     certain circumstances, a local attacker with read access to Cinder log files could obtain access to     sensitive information. (CVE-2014-7230)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Fix CVE-2014-3641

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
193820	RHEL 6 : openstack-cinder (RHSA-2014:1787)	Nessus	Red Hat Local Security Checks	medium
174334	FreeBSD : py-cinder -- data leak (f4a94232-7864-4afb-bbf9-ff2dc8e288d1)	Nessus	FreeBSD Local Security Checks	medium
79211	Ubuntu 14.04 LTS : OpenStack Cinder vulnerabilities (USN-2405-1)	Nessus	Ubuntu Local Security Checks	medium
78787	Fedora 21 : openstack-cinder-2014.1.3-1.fc21 (2014-12417)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-3641

high

Tenable Plugins

medium

medium

medium

medium