CVE-2022-4134

Published: 28 November 2022

malicious data modification when configuring Glance with COW backends

Notes

as of 2022-11-29, there is no software fix for this issue, the
recommended best practices to mitigate the issue is listed in
the upstream OSSN. Marking CVE as deferred.

Mitigation

See upstream recommendations at https://wiki.openstack.org/wiki/OSSN/OSSN-0090

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4134
• https://wiki.openstack.org/wiki/OSSN/OSSN-0090
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=2147462
• https://bugs.launchpad.net/ossn/+bug/1990157