Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-44082HistorySep 06, 2024 - 1:15 a.m.
CVE-2024-44082
2024-09-0601:15:11
Debian Security Bug Tracker
security-tracker.debian.org
6
openstack
ironic
ironic-python-agent
image processing
vulnerability
cve-2024-44082
qemu-img
unauthorized access
sensitive data
unix
In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ironic | <= 1:21.1.0-3 | ironic_1:21.1.0-3_all.deb |
| Debian | 11 | all | ironic | <= 1:16.0.3-1 | ironic_1:16.0.3-1_all.deb |
| Debian | 999 | all | ironic | <= 1:24.1.1-3 | ironic_1:24.1.1-3_all.deb |
| Debian | 13 | all | ironic | <= 1:24.1.1-3 | ironic_1:24.1.1-3_all.deb |
| Debian | 999 | all | ironic-python-agent | <= 9.11.0-3 | ironic-python-agent_9.11.0-3_all.deb |
| Debian | 13 | all | ironic-python-agent | <= 9.11.0-3 | ironic-python-agent_9.11.0-3_all.deb |
Related
vulnrichment
vulnrichment
CVE-2024-44082
2024-09-06 00:00:00
cvelist
cvelist
CVE-2024-44082
2024-09-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6989-1)
2024-09-06 00:00:00
ubuntu
ubuntu
OpenStack vulnerability
2024-09-04 00:00:00
osv
osv
CVE-2024-44082
2024-09-06 01:15:11
ironic vulnerability
2024-09-04 16:04:06
redhatcve
redhatcve
CVE-2024-44082
2024-09-06 13:43:13
ubuntucve
ubuntucve
CVE-2024-44082
2024-09-04 00:00:00
nvd
nvd
CVE-2024-44082
2024-09-06 01:15:11
nessus
nessus
Ubuntu 22.04 LTS / 24.04 LTS : OpenStack vulnerability (USN-6989-1)
2024-09-05 00:00:00
cve
cve
CVE-2024-44082
2024-09-06 01:15:11