787 matches found
ROS-20250905-01
A vulnerability in the Python library responsible for interacting with various image storage backends python-glance-store is related to the fact that the package registers an accesskey for Glance-store when the DEBUG log level is enabled. DEBUG log level. Exploitation of the vulnerability could...
Linux Distros Unpatched Vulnerability : CVE-2022-4134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual...
Linux Distros Unpatched Vulnerability : CVE-2024-32498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2...
Linux Distros Unpatched Vulnerability : CVE-2016-4383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause...
Linux Distros Unpatched Vulnerability : CVE-2013-4354
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the...
Linux Distros Unpatched Vulnerability : CVE-2015-8234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which trigger...
Linux Distros Unpatched Vulnerability : CVE-2022-47951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before...
TencentOS Server 4: python-glance-store (TSSA-2024:0824)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0824 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2022-25937
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory. This is related to but distinct from the vulnerability reported in CVE-2018-3715...
CVE-2022-24696
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
Malicious code in glance-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3686 Malicious code in glance-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 6 : openstack-glance (RHSA-2013:1525)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1525 advisory. The openstack-glance packages provide a service code name Glance that acts as a registry for virtual machine images. A flaw was found in the Glance...
RHEL 7 : openstack-glance (RHSA-2016:0309)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0309 advisory. OpenStack Image Service glance provides discovery, registration, and delivery services for disk and server images. The service provides the ability t...
RHEL 6 : openstack-glance (RHSA-2013:0209)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0209 advisory. These packages provide a service code name Glance that acts as a registry for virtual machine images. It was found that when the OpenStack Glance...
Linux Distros Unpatched Vulnerability : CVE-2024-1141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...
Linux Distros Unpatched Vulnerability : CVE-2016-8611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 /images API POST method for authenticat...
Linux Distros Unpatched Vulnerability : CVE-2017-7200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network...
