mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
33 lines
1.8 KiB
JSON
33 lines
1.8 KiB
JSON
{
|
|
"id": "CVE-2024-44082",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-09-06T01:15:11.150",
|
|
"lastModified": "2024-09-06T15:15:13.180",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "En OpenStack Ironic anterior a la versi\u00f3n 26.0.1 y en ironic-python-agent anterior a la versi\u00f3n 9.13.1, existe una vulnerabilidad en el procesamiento de im\u00e1genes, en la que un usuario autenticado podr\u00eda utilizar una imagen creada para explotar comportamientos no deseados en qemu-img, incluido un posible acceso no autorizado a datos potencialmente confidenciales. Los detalles de la versi\u00f3n afectada/corregida son: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://bugs.launchpad.net/ironic/+bug/2071740",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://security.openstack.org/ossa/OSSA-2024-003.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://www.openwall.com/lists/oss-security/2024/09/04/4",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |