{"id":"CVE-2014-0134","aliases":["DEBIAN-CVE-2014-0134","EUVD-2014-0036","GHSA-w429-xc55-hc48","PYSEC-2014-112","RHSA-2014:0578"],"status":"published","title":"OpenStack Nova host data leak to vm instance in rescue mode","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01488,"percentile":0.74238,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-05-08T14:00:00Z","modified":"2026-10-23T15:47:32Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["12.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2013.2.2-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2013.2.2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2013.2.2-4"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-api","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cells","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cert","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-common","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-compute","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-conductor","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-console","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-doc","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-network","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-novncproxy","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-objectstore","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-scheduler","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"python-nova","fixed_in":["0:2013.2.3-7.el6ost"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2-4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-7.el6ost"}]}]}],"products":[{"vendor":"openstack","product":"compute"}],"references":[{"url":"https://bugs.launchpad.net/nova/+bug/1221190","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/27/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2247-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0134","tags":["advisory"]},{"url":"https://github.com/openstack/nova/commit/25e761acd56d4c820273fc0245ada06c500c1637","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/d416f4310bb946b4b127201ec3c37e530d988714","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/dc8de426066969a3f0624fdc2a7b29371a2d55bf","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-112.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-w429-xc55-hc48"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0134","tags":["advisory"]},{"url":"https://github.com/openstack/nova","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0578","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1022627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1069429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1069432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1089070","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0578.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0134","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0134","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:00:00Z","modified":"2024-08-06T09:05:38.8Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0036","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:00:00Z","modified":"2024-08-06T09:05:38Z","updated_at":"2026-11-03T01:57:22.992Z"}],"ghsa":[{"id":"GHSA-w429-xc55-hc48","title":"OpenStack Nova host data leak to vm instance in rescue mode","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2022-05-17T04:41:34Z","modified":"2024-11-26T18:36:09Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"},{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:38:23.575854Z"}],"nvd":[{"id":"CVE-2014-0134","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:29:13.22Z","modified":"2026-06-17T00:02:21.617Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:54.082915Z"}],"osv":[{"id":"GHSA-w429-xc55-hc48","title":"OpenStack Nova host data leak to vm instance in rescue mode","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2022-05-17T04:41:34Z","modified":"2024-11-26T18:36:08Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"},{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:58.04805Z"},{"id":"CVE-2014-0134","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:29:13Z","modified":"2026-04-10T03:43:30.784062Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0134","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:29:13.22Z","modified":"2026-10-23T15:47:32.18733689Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"PYSEC-2014-112","description":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.","status":"published","published":"2014-05-08T14:29:00Z","modified":"2024-11-25T22:42:06.019537Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"RHSA-2014:0578","title":"Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:17:00Z","modified":"2026-08-01T10:30:07.058641585Z","updated_at":"2026-11-02T15:53:02.532052Z"}]}}