CVE-2014-0162
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Exploit likelihood
What each source reports
NVD Score used
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- Updated
- 2026-11-02
EUVDEUVD-2022-5126No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
EUVD-2022-5126- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r7pj-rvwg-vxhrNo score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
GHSA-r7pj-rvwg-vxhr- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-0162No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
DEBIAN-CVE-2014-0162- Updated
- 2026-11-02
OSVGHSA-r7pj-rvwg-vxhrNo score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
GHSA-r7pj-rvwg-vxhr- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVPYSEC-2026-817No score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
PYSEC-2026-817- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-0162No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
UBUNTU-CVE-2014-0162- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glancePyPI | 2013.2 up to 2013.2.4 | 2013.2.4 |
glanceDebian:12 | before 2014.1-1 | 2014.1-1 |
glanceDebian:13 | before 2014.1-1 | 2014.1-1 |
glanceDebian:14 | before 2014.1-1 | 2014.1-1 |
openstack-glanceRed Hat:openstack:4::el6 | before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
openstack-glance-docRed Hat:openstack:4::el6 | before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
python-glanceRed Hat:openstack:4::el6 | before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0162 is a medium vulnerability (CVSS 6.0) in Openstack Icehouse, published April 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 81st percentile. Fixed in glance 2013.2.4.
References
ubuntu.com/usn/USN-2193-1
launchpad.net/bugs/1298698
openwall.com/lists/oss-security/2014/04/10/13
rhn.redhat.com/errata/RHSA-2014-0455.html
nvd.nist.gov/vuln/detail/CVE-2014-0162
access.redhat.com/errata/RHSA-2014:0455
Show 11 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1085163
github.com/advisories/GHSA-r7pj-rvwg-vxhr
security-tracker.debian.org/tracker/CVE-2014-0162
opendev.org/openstack/glance
pypi.org/project/glance
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0455.json
cve.org/CVERecord?id=CVE-2014-0162
ubuntu.com/security/CVE-2014-0162