Moderate severityNVD Advisory· Published Oct 8, 2014· Updated Jun 17, 2026

CVE-2014-3641

Description

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
cinderPyPI	< 2014.1.3	2014.1.3

Affected products

OpenStack/Cinder2 versions
cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:*range: <=2014.1.2
- cpe:2.3:a:openstack:cinder:2014.1.1:*:*:*:*:*:*:*
ghsa-coords
pkg:pypi/cinder
Range: < 2014.1.3

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-qhch-g8qr-p497ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3641ghsaADVISORY
rhn.redhat.com/errata/RHSA-2014-1787.htmlnvdWEB
rhn.redhat.com/errata/RHSA-2014-1788.htmlnvdWEB
seclists.org/oss-sec/2014/q4/78nvdWEB
www.ubuntu.com/usn/USN-2405-1nvdWEB
access.redhat.com/errata/RHSA-2014:1787ghsaWEB
access.redhat.com/errata/RHSA-2014:1788ghsaWEB
access.redhat.com/security/cve/CVE-2014-3641ghsaWEB
bugs.launchpad.net/cinder/+bug/1350504nvdWEB
bugzilla.redhat.com/show_bug.cgighsaWEB
opendev.org/openstack/cinderghsaPACKAGE
web.archive.org/web/20200228053848/http://www.securityfocus.com/bid/70221ghsaWEB
www.securityfocus.com/bid/70221nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000