ironic vulnerability

2024-09-0416:04:06

Google

osv.dev

ironic

image processing

vulnerability

qemu-img

unauthorized access

sensitive data

AI Score

6.9

Confidence

Low

EPSS

Percentile

16.3%

JSON

Dan Smith, Julia Kreger and Jay Faulkner discovered that in
image processing for Ironic, a specially crafted image
could be used by an authenticated user to exploit undesired behaviors
in qemu-img, including possible unauthorized access to potentially
sensitive data.