Most recent entries from all

bdu:2026-01022

EUVD-2026-199768

fkie_cve-2024-44082

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

RHSA-2024:7174 — Red Hat Security Advisory: OpenShift Container Platform 4.16.15 bug fix and security update

golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm containers/image: digest type does not guarantee valid type golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses openstack-ironic: Specially crafted image may allow authenticated users to gain access to potentially sensitive data

UBUNTU-CVE-2024-44082

Affected: Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:24.04:LTS: ironic-python-agent, Ubuntu:25.10: ironic, Ubuntu:25.10: ironic-python-agent, Ubuntu:26.04:LTS: ironic, Ubuntu:26.04:LTS: ironic-python-agent

WID-SEC-W-2024-3522 — Red Hat OpenStack Platform: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und einen Denial of Service zu verursachen.