CVE-2024-44082

2024-09-0400:00:00

ubuntu.com

cve-2024-44082

red hat

g-research

image processing

ironic

authenticated user

qemu-img

unauthorized access

sensitive data

unix

AI Score

6.6

Confidence

Low

EPSS

Percentile

16.3%

JSON

Dan Smith and Julia Kreger of Red Hat and Jay Faulkner of G-Research
noticed a vulnerability in image processing for Ironic, in which a
specially crafted image could be used by an authenticated user to
exploit undesired behaviors in qemu-img, including possible unauthorized
access to potentially sensitive data.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchironic< anyUNKNOWN
ubuntu20.04noarchironic< anyUNKNOWN
ubuntu22.04noarchironic< 1:20.1.0-0ubuntu1.2UNKNOWN
ubuntu24.04noarchironic< 1:24.1.1-0ubuntu1.2UNKNOWN
ubuntu16.04noarchironic< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ironic	< any	UNKNOWN
ubuntu	20.04	noarch	ironic	< any	UNKNOWN
ubuntu	22.04	noarch	ironic	< 1:20.1.0-0ubuntu1.2	UNKNOWN
ubuntu	24.04	noarch	ironic	< 1:24.1.1-0ubuntu1.2	UNKNOWN
ubuntu	16.04	noarch	ironic	< any	UNKNOWN