{"action":"Upgrade nova to 2013.2.2-4 or later.","affected":[{"fixed":"2013.2.2-4","introduced":"0"}],"component":"nova","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2013.2.2-4"],"id":"tcs_01M5NANP4NHHZJCHH6XPACWA79","modified_at":"2026-10-23T15:47:32.187336890Z","published_at":"2014-05-08T14:29:13.220Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-0134","https://security-tracker.debian.org/tracker/CVE-2014-0134"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-0134#Debian:14/nova","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-0134"}],"summary":"The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticat"}