Lucene search
+L

403 matches found

Snyk
Snyk
added 2024/10/04 6:31 p.m.6 views

Improper Validation of Integrity Check Value

Overview ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due missing validations of checksum files of supplied imagesource URLs, before the raw format conversion. Remediation Upgrade ironic to version...

8.7CVSS7AI score0.00663EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/04 6:31 p.m.14 views

GHSA-8H22-6QWX-Q4W9 OpenStack Ironic fails to verify checksums of supplied image_source URLs

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

6.9CVSS5.4AI score0.00663EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2024/10/04 6:31 p.m.24 views

OpenStack Ironic fails to verify checksums of supplied image_source URLs

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS6.8AI score0.00663EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2024/10/04 6:15 p.m.23 views

CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS0.00663EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/04 6:15 p.m.5 views

DEBIAN-CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS6.3AI score0.00663EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/04 6:15 p.m.4 views

UBUNTU-CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS5.8AI score0.00663EPSS
SaveExploits0References6
CVE
CVE
added 2024/10/04 12:0 a.m.109 views

CVE-2024-47211

The CVE-2024-47211 issue in OpenStack Ironic is due to lack of checksum validation for image_source URLs when converting images to raw format for streaming. Affected ranges include OpenStack Ironic releases before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x...

5.3CVSS6.7AI score0.00663EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/10/04 12:0 a.m.19 views

CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

7.2AI score0.00663EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/10/04 12:0 a.m.21 views

CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

0.00663EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/04 12:0 a.m.9 views

PT-2024-32480

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 21.4.4 OpenStack Ironic versions 22.x through 23.x before 23.0.3 OpenStack Ironic versions 23.x through 24.x before 24.1.3 OpenStack Ironic versions 25.x through 26.x before 26.1.0 Description The issue is...

6.9CVSS6.6AI score0.00663EPSS
SaveExploits0References24
OSV
OSV
added 2024/10/04 12:0 a.m.13 views

CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS6.8AI score0.00663EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/10/04 12:0 a.m.17 views

CVE-2024-47211

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

5.3CVSS6.3AI score0.00663EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/03 12:0 a.m.5 views

OpenStack Ironic 安全漏洞

OpenStack Ironic is an integrated OpenStack program open-sourced by OpenStack. It is used to configure bare metal rather than virtual machines. A security vulnerability exists in OpenStack Ironic that stems from a lack of checksum validation of the provided imagesource URL. The following versions...

5.3CVSS6.7AI score0.00663EPSS
SaveExploits0References6
OSV
OSV
added 2024/09/15 10:55 p.m.14 views

RHSA-2015:1929 Red Hat Security Advisory: openstack-ironic-discoverd security update

Bulletin has no description...

6.8CVSS6.1AI score0.01585EPSS
SaveExploits0References8
OSV
OSV
added 2024/09/15 10:55 p.m.17 views

RHSA-2015:2685 Red Hat Security Advisory: openstack-ironic-discoverd security update

Bulletin has no description...

6.8CVSS6.1AI score0.01585EPSS
SaveExploits0References7
OSV
OSV
added 2024/09/13 7:53 p.m.12 views

RHSA-2019:2505 Red Hat Security Advisory: openstack-ironic-inspector security update

Bulletin has no description...

8.3CVSS9.1AI score0.02464EPSS
SaveExploits0References12
OSV
OSV
added 2024/09/13 7:52 p.m.15 views

RHSA-2019:1734 Red Hat Security Advisory: openstack-ironic-inspector security update

Bulletin has no description...

8.3CVSS9.1AI score0.02464EPSS
SaveExploits0References13
OSV
OSV
added 2024/09/13 7:51 p.m.15 views

RHSA-2019:1669 Red Hat Security Advisory: openstack-ironic-inspector security update

Bulletin has no description...

8.3CVSS9.1AI score0.02464EPSS
SaveExploits0References13
OSV
OSV
added 2024/09/13 7:51 p.m.14 views

RHSA-2019:1722 Red Hat Security Advisory: openstack-ironic-inspector security update

Bulletin has no description...

8.3CVSS9.1AI score0.02464EPSS
SaveExploits0References12
OSV
OSV
added 2024/09/13 11:5 a.m.21 views

RHSA-2016:1378 Red Hat Security Advisory: openstack-ironic security update

Bulletin has no description...

5.9CVSS7.4AI score0.02836EPSS
SaveExploits0References7
Rows per page
Query Builder