Comment 17 for bug 1276862
Revision history for this message
| Thierry Carrez (ttx) wrote Re: Nova libvirt driver live migration allows command injection (CVE-2014-0070) | #17 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Let's wait for the original reporter (Paul) to confirm or deny John/Nikola's analysis. If this really is shallow (as an attack vector) then we can implement extra validation as a public bugfix.