CVE-2014-3641

Publication date 8 October 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

Status

Package Ubuntu Release Status
cinder 14.10 utopic
Not affected
14.04 LTS trusty
Fixed 1:2014.1.3-0ubuntu1
12.04 LTS precise Not in release
10.04 LTS lucid Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
cinder

References

Related Ubuntu Security Notices (USN)

    • USN-2405-1
    • OpenStack Cinder vulnerabilities
    • 11 November 2014

Other references