https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:48:07 +0000 https://cve.radiocsirt.org/vuln/cve-2024-29008 <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack, apache cloudstack</p> <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack, apache cloudstack</p> <p>A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.</p> <p>Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-29008