CVE-2013-1068

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-19 · updated 2026-06-16
Weakness: CWE-264

Description

The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability.

Affected products

Canonical Ubuntu Linux: 13.10, 14.04

References

http://ubuntu.com/usn/usn-2248-1
http://www.ubuntu.com/usn/USN-2247-1
http://ubuntu.com/usn/usn-2248-1
http://www.ubuntu.com/usn/USN-2247-1

Get alerted when CVE-2013-1068 or the next vulnerability affects your stack