CVE-2014-0162
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Exploit likelihood
What each source reports
NVD Score used
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- Updated
- 2026-11-02
EUVDEUVD-2022-5126 No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
EUVD-2022-5126- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r7pj-rvwg-vxhr No score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
GHSA-r7pj-rvwg-vxhr- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
CVE-2014-0162- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-0162 No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
DEBIAN-CVE-2014-0162- Updated
- 2026-11-02
OSVGHSA-r7pj-rvwg-vxhr No score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
GHSA-r7pj-rvwg-vxhr- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVPYSEC-2026-817 No score
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
PYSEC-2026-817- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-0162 No score
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
- Record
UBUNTU-CVE-2014-0162- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glancePyPI |
2013.2 up to 2013.2.4 | 2013.2.4 |
glanceDebian:12 |
before 2014.1-1 | 2014.1-1 |
glanceDebian:13 |
before 2014.1-1 | 2014.1-1 |
glanceDebian:14 |
before 2014.1-1 | 2014.1-1 |
openstack-glanceRed Hat:openstack:4::el6 |
before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
openstack-glance-docRed Hat:openstack:4::el6 |
before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
python-glanceRed Hat:openstack:4::el6 |
before 0:2013.2.2-3.el6ost | 0:2013.2.2-3.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0162 is a medium vulnerability (CVSS 6.0) in Openstack Icehouse, published April 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. Fixed in glance 2013.2.4.
References
ubuntu.com/usn/USN-2193-1
launchpad.net/bugs/1298698
openwall.com/lists/oss-security/2014/04/10/13
rhn.redhat.com/errata/RHSA-2014-0455.html
nvd.nist.gov/vuln/detail/CVE-2014-0162
access.redhat.com/errata/RHSA-2014:0455
Show 11 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1085163
github.com/advisories/GHSA-r7pj-rvwg-vxhr
security-tracker.debian.org/tracker/CVE-2014-0162
opendev.org/openstack/glance
pypi.org/project/glance
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0455.json
cve.org/CVERecord?id=CVE-2014-0162
ubuntu.com/security/CVE-2014-0162