VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 26, 2017· Updated Jun 17, 2026

CVE-2014-8170

CVE-2014-8170

Description

ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, which allows remote authenticated users and physically proximate attackers to execute arbitrary commands via a ; (semicolon) in an input string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Ovirt/Ovirt Node2 versions
    cpe:2.3:a:ovirt:ovirt-node:3.0.0-474-gb852fd7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ovirt:ovirt-node:3.0.0-474-gb852fd7:*:*:*:*:*:*:*
    • (no CPE)range: 3.0.0-474-gb852fd7
  • Red Hat/Enterprise Virtualizationllm-fuzzy
    Range: 3.0.0-474-gb852fd7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.