OpenStack Image Registry and Delivery Service (Glance) 2013.2
Approved changes feed: RSS · Atom
cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):2013.2:*:*:*:*:*:*:*
part: a version: 2013.2 update: *
| Vendor | Openstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a) |
|---|---|
| Product | Image Registry And Delivery Service (Glance) (08075d3f-d82e-57df-aa20-c356b48bf240) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5356 |
vulnerable | 2026-06-03 14:34:06.267063 |
Details available
OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.
Published: 2014-08-25T14:00:00.000Z
Updated: 2024-08-06T11:41:49.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1948 |
vulnerable | 2026-06-03 14:33:49.081060 |
Details available
OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.
Published: 2014-02-14T15:00:00.000Z
Updated: 2024-08-06T09:58:15.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0162 |
vulnerable | 2026-06-03 14:33:37.275397 |
Details available
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Published: 2014-04-27T20:00:00.000Z
Updated: 2024-08-06T09:05:39.016Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.