Lucene search
Ubuntu.comUB:CVE-2022-4134HistoryMar 06, 2023 - 12:00 a.m.
CVE-2022-4134
2023-03-0600:00:00
ubuntu.com
ubuntu.com
15
openstack-glance
image tampering
virtual machines
CVSS3
2.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
23.9%
A flaw was found in openstack-glance. This issue could allow a remote,
authenticated attacker to tamper with images, compromising the integrity of
virtual machines created using these modified images.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=2147462>
- <https://bugs.launchpad.net/ossn/+bug/1990157>
Notes
| Author | Note |
|---|---|
| mdeslaur | as of 2022-11-29, there is no software fix for this issue, the recommended best practices to mitigate the issue is listed in the upstream OSSN. Marking CVE as deferred. |
Related
cve
cve
CVE-2022-4134
2023-03-06 23:15:11
debiancve
debiancve
CVE-2022-4134
1976-01-01 00:00:00
redhatcve
redhatcve
CVE-2022-4134
2022-11-24 00:12:07
cvelist
cvelist
CVE-2022-4134
2023-03-06 00:00:00
prion
prion
Design/Logic Flaw
2023-03-06 23:15:00
nvd
nvd
CVE-2022-4134
2023-03-06 23:15:11
github
github
osv
osv
CVSS3
2.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
23.9%
Related for UB:CVE-2022-4134