---
title: "CVE-2014-0134\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2014-0134?format=md
keywords: index, follow
---

# CVE-2014-0134

Publication date 8 May 2014

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3
and Icehouse before 2014.1, when using libvirt to spawn images and
use\_cow\_images is set to false, allows remote authenticated users to read
certain compute host files by overwriting an instance disk with a crafted
image.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2014-0134?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| nova | 14.04 LTS trusty | Not in release |
| 13.10 saucy | Fixed 1:2013.2.3-0ubuntu1.2 |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 10.04 LTS lucid | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)
* [Patch details](https://ubuntu.com/security/CVE-2014-0134?format=md#patch-details)

## Notes

---

### [jdstrand](https://launchpad.net/~jdstrand)

1:2013.2.3-0ubuntu1 is now in saucy-updates
introduced in grizzly

### Patch details

For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)

| Package | Patch details |
| --- | --- |
| nova | * Upstream:   [?id=dc8](https://git.openstack.org/cgit/openstack/nova/commit/?id=dc8de426066969a3f0624fdc2a7b29371a2d55bf) * Upstream:   [?id=25e](https://git.openstack.org/cgit/openstack/nova/commit/?id=25e761acd56d4c820273fc0245ada06c500c1637) |

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0134)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-0134)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-0134)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2014-0134)

### Related Ubuntu Security Notices (USN)

+ [USN-2247-1](https://usn.ubuntu.com/USN-2247-1)
+ OpenStack Nova vulnerabilities
+ 17 June 2014

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2014-0134>