https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:43:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366759 EUVD-2026-366759 https://cve.radiocsirt.org/vuln/euvd-2026-366759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24708 <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24708 https://cve.radiocsirt.org/vuln/ghsa-m4f3-qp2w-gwh6 <p><strong>Affected:</strong> PyPI: Nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> <p><strong>Affected:</strong> PyPI: Nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-m4f3-qp2w-gwh6 https://cve.radiocsirt.org/vuln/pysec-2026-2685 <p><strong>Affected:</strong> PyPI: nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> <p><strong>Affected:</strong> PyPI: nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2685 https://cve.radiocsirt.org/vuln/rhsa-2026:54757 <p>golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation etcd: etcd: Authorization bypass allows information disclosure and denial of service openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation cry…</p> <p>golang: net/url: Memory exhaustion in query parameter parsing in net/url crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation etcd: etcd: Authorization bypass allows information disclosure and denial of service openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation cry…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54757 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24708 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: nova, Ubuntu:Pro:18.04:LTS: nova, Ubuntu:Pro:20.04:LTS: nova, Ubuntu:22.04:LTS: nova, Ubuntu:24.04:LTS: nova, Ubuntu:25.10: nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: nova, Ubuntu:Pro:18.04:LTS: nova, Ubuntu:Pro:20.04:LTS: nova, Ubuntu:22.04:LTS: nova, Ubuntu:24.04:LTS: nova, Ubuntu:25.10: nova</p> <p>An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova&#39;s Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24708 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1301 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack Services auf OpenShift ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack Services auf OpenShift ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1301