OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...

cinderlib (>=2.1.0 <=4.0.0) potentially affected by CVE-2022-47951 via cinder (>=16.4.2 <=18.2.1)

cinder PYPI version =16.4.2, =2.1.0, =4.0.0 Source cves: CVE-2022-47951 Source advisory: OSV:GHSA-7H75-HWXX-QPGC...

CVE-2020-10755

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...