debtcollector (>=0.3.0, <=0.4.0), keystonemiddleware (>=1.3.0, <=1.6.1) +14 more potentially affected by CVE-2022-0718 via oslo-utils (1.9.0)

oslo-utils PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - debtcollector =0.3.0, =1.3.0, =0.2.0, =0.1.0, =0.9.0, =0.0.1.dev357, =1.0.13, =0.16.1, =0.3.0, =0.4.1, =1.0.0, =1.0.22, =2.3.10, =2.21.0,...

openstack-nova/glance/cinder: Malicious image may exhaust resources

A resource vulnerability in the OpenStack Compute nova, Block Storage cinder, and Image glance services was found in their use of qemu-img. An unprivileged user could consume as much as 4 GB of RAM on the compute host by uploading a malicious image. This flaw could lead possibly to host...

openstack-nova/glance/cinder: Malicious image may exhaust resources

A resource vulnerability in the OpenStack Compute nova, Block Storage cinder, and Image glance services was found in their use of qemu-img. An unprivileged user could consume as much as 4 GB of RAM on the compute host by uploading a malicious image. This flaw could lead possibly to host...