598 matches found
CVE-2026-115638
A flaw was found in OpenStack Ironic. An authenticated remote attacker can exploit this issue by supplying a specially crafted configuration drive containing compressed data that expands to an excessively large size. Processing this data can exhaust system memory and storage resources, leading to...
RHCOS 4 : OpenShift Container Platform 4.12.102 (RHSA-2026:90271)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90271 advisory. - openstack-ironic: Prevent rehoming resources to nodes with different owner CVE-2026-44918 - crypto/x509: golang: crypto/x509:...
openstack-ironic: Prevent rehoming resources to nodes with different owner
A flaw was found in OpenStack Ironic. An authenticated project manager can change the node associated with Volume Connectors or Volume Target objects, potentially changing the project permitted to access the object. Volume Connectors contain secrets in environments configuring boot from volume wi...
UBUNTU-CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
DEBIAN-CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
DEBIAN-CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
DEBIAN-CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
UBUNTU-CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
UBUNTU-CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
EUVD-2026-108574
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic versions prior to 39.0.1 are vulnerable to a path traversal vulnerability within the Redfish vendor passthrough subscription management. An authenticated attacker with vendor passthrough privileges can use a crafted subscription id to perform GET or DELETE operations on arbitrary...
