Debian/cinder: medium 6.5
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 i
Action: Upgrade cinder to 2:24.0.0-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:24.0.0-5 | - |
Fixed versions
| 2:24.0.0-5 |
Sources
- osv: DEBIAN-CVE-2024-32498#Debian:13/cinder
- https://security-tracker.debian.org/tracker/CVE-2024-32498
published · modified · JSON