Every CVE Search/ Get API key

CVE-2024-44082

Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update

4.3 MediumFix available

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.55%Up 0.5 points since Sep 6, 2024
90%50%10%1%

What each source reports

CVE List Score used 4.3

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
CVE-2024-44082
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-862
Updated
2026-11-02
EUVDEUVD-2024-40852 4.3

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
EUVD-2024-40852
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-03
NVD 4.3

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
CVE-2024-44082
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-862
Updated
2026-11-02
OSVDEBIAN-CVE-2024-44082 4.3

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
DEBIAN-CVE-2024-44082
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:7941 8.3

Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update

Record
RHSA-2024:7941
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:8694 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update

Record
RHSA-2024:8694
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2024:9982 6.8

Red Hat Security Advisory: RHOSP 17.1.4 (openstack-ironic) security update

Record
RHSA-2024:9982
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:0204 6.8

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-ironic) security update

Record
RHSA-2025:0204
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-44082 4.3

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
UBUNTU-CVE-2024-44082
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSV No score

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Record
CVE-2024-44082
Updated
2026-11-02
OSVUSN-6989-1 No score

ironic vulnerability

Dan Smith, Julia Kreger and Jay Faulkner discovered that in image processing for Ironic, a specially crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data.

Record
USN-6989-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ironic
Debian:12
 before 1:21.4.4-0+deb12u1, plus listed versions
1:21.1.0-31:21.1.0-3+deb12u11:21.3.0-11:21.4.0-11:21.4.0-21:21.4.0-31:21.4.0-4
1:21.4.4-0+deb12u1
ironic
Debian:13
 before 1:26.1.0-1
1:26.1.0-1
ironic
Debian:14
 before 1:26.1.0-1
1:26.1.0-1
ironic-python-agent
Debian:13
 before 9.14.0-1
9.14.0-1
ironic-python-agent
Debian:14
 before 9.14.0-1
9.14.0-1
podman
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-catatonit
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-debugsource
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
Show 102 moreShow less
Affected packages
PackageAffectedFixed
podman-docker
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-gvproxy
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-plugins
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-plugins-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-remote
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-remote-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
podman-tests
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 3:4.4.1-13.rhaos4.13.el8
3:4.4.1-13.rhaos4.13.el8
skopeo
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el8
2:1.11.3-3.rhaos4.13.el8
skopeo-tests
Red Hat:openshift:4.13::el8
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el8
2:1.11.3-3.rhaos4.13.el8
podman
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-docker
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-gvproxy
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-plugins
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-plugins-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-remote
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-remote-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
podman-tests
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 3:4.4.1-14.rhaos4.13.el9
3:4.4.1-14.rhaos4.13.el9
skopeo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el9
2:1.11.3-3.rhaos4.13.el9
skopeo-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el9
2:1.11.3-3.rhaos4.13.el9
skopeo-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el9
2:1.11.3-3.rhaos4.13.el9
skopeo-tests
Red Hat:openshift:4.13::el9
From an advisory covering 3 CVEs
 before 2:1.11.3-3.rhaos4.13.el9
2:1.11.3-3.rhaos4.13.el9
python-webob
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 0:1.8.8-2.el9
0:1.8.8-2.el9
python3-webob
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 0:1.8.8-2.el9
0:1.8.8-2.el9
openstack-ironic
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
openstack-ironic-api
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
openstack-ironic-common
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
openstack-ironic-conductor
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
openstack-ironic-dnsmasq-tftp-server
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
python3-ironic-tests
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 3 CVEs
 before 1:21.3.1-0.20240911165036.c0d61d0.el9
1:21.3.1-0.20240911165036.c0d61d0.el9
cri-o
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 0:1.25.5-30.rhaos4.12.git53dc492.el8
0:1.25.5-30.rhaos4.12.git53dc492.el8
cri-o-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 0:1.25.5-30.rhaos4.12.git53dc492.el8
0:1.25.5-30.rhaos4.12.git53dc492.el8
cri-o-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 0:1.25.5-30.rhaos4.12.git53dc492.el8
0:1.25.5-30.rhaos4.12.git53dc492.el8
cri-o
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 0:1.25.5-5.rhaos4.12.git53dc492.el9
0:1.25.5-5.rhaos4.12.git53dc492.el9
cri-o-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 0:1.25.5-5.rhaos4.12.git53dc492.el9
0:1.25.5-5.rhaos4.12.git53dc492.el9
cri-o-debugsource
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 0:1.25.5-5.rhaos4.12.git53dc492.el9
0:1.25.5-5.rhaos4.12.git53dc492.el9
podman
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-catatonit
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-docker
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-gvproxy
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-plugins
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-plugins-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-remote
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-remote-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman-tests
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 3:4.4.1-8.rhaos4.12.el8
3:4.4.1-8.rhaos4.12.el8
podman
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-catatonit
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-catatonit-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-debugsource
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-docker
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-gvproxy
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-gvproxy-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-plugins
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-plugins-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-remote
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-remote-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
podman-tests
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 3:4.2.0-12.rhaos4.12.el9
3:4.2.0-12.rhaos4.12.el9
containernetworking-plugins
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 1:1.4.0-4.rhaos4.12.el8
1:1.4.0-4.rhaos4.12.el8
containernetworking-plugins-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 1:1.4.0-4.rhaos4.12.el8
1:1.4.0-4.rhaos4.12.el8
containernetworking-plugins-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 1:1.4.0-4.rhaos4.12.el8
1:1.4.0-4.rhaos4.12.el8
skopeo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el8
2:1.9.4-7.rhaos4.12.el8
skopeo-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el8
2:1.9.4-7.rhaos4.12.el8
skopeo-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el8
2:1.9.4-7.rhaos4.12.el8
skopeo-tests
Red Hat:openshift:4.12::el8
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el8
2:1.9.4-7.rhaos4.12.el8
skopeo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el9
2:1.9.4-7.rhaos4.12.el9
skopeo-debuginfo
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el9
2:1.9.4-7.rhaos4.12.el9
skopeo-debugsource
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el9
2:1.9.4-7.rhaos4.12.el9
skopeo-tests
Red Hat:openshift:4.12::el9
From an advisory covering 6 CVEs
 before 2:1.9.4-7.rhaos4.12.el9
2:1.9.4-7.rhaos4.12.el9
openstack-ironic
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
openstack-ironic-api
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
openstack-ironic-common
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
openstack-ironic-conductor
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
openstack-ironic-dnsmasq-tftp-server
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
python3-ironic-tests
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 6 CVEs
 before 1:21.0.1-0.20240913135525.114badc.el9
1:21.0.1-0.20240913135525.114badc.el9
openstack-ironic
Red Hat:openstack:17.1::el9
 before 1:17.1.1-17.1.20240917210749.c31db88.el9ost
1:17.1.1-17.1.20240917210749.c31db88.el9ost
openstack-ironic-api
Red Hat:openstack:17.1::el9
 before 1:17.1.1-17.1.20240917210749.c31db88.el9ost
1:17.1.1-17.1.20240917210749.c31db88.el9ost
openstack-ironic-common
Red Hat:openstack:17.1::el9
 before 1:17.1.1-17.1.20240917210749.c31db88.el9ost
1:17.1.1-17.1.20240917210749.c31db88.el9ost
openstack-ironic-conductor
Red Hat:openstack:17.1::el9
 before 1:17.1.1-17.1.20240917210749.c31db88.el9ost
1:17.1.1-17.1.20240917210749.c31db88.el9ost
openstack-ironic
Red Hat:openstack:16.2::el8
 before 1:13.0.8-2.20230713045150.d10fd5c.el8ost
1:13.0.8-2.20230713045150.d10fd5c.el8ost
openstack-ironic-api
Red Hat:openstack:16.2::el8
 before 1:13.0.8-2.20230713045150.d10fd5c.el8ost
1:13.0.8-2.20230713045150.d10fd5c.el8ost
openstack-ironic-common
Red Hat:openstack:16.2::el8
 before 1:13.0.8-2.20230713045150.d10fd5c.el8ost
1:13.0.8-2.20230713045150.d10fd5c.el8ost
openstack-ironic-conductor
Red Hat:openstack:16.2::el8
 before 1:13.0.8-2.20230713045150.d10fd5c.el8ost
1:13.0.8-2.20230713045150.d10fd5c.el8ost
ironic
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:4.2.0-0ubuntu11:4.3.0-0ubuntu11:5.1.0-0ubuntu11:5.1.2-0ubuntu1
 None known
ironic
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:9.1.0-0ubuntu21:9.2.0-0ubuntu11:10.0.0-0ubuntu11:10.1.0-0ubuntu11:10.1.1-0ubuntu11:10.1.1-0ubuntu2
 None known
ironic
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:13.0.1-0ubuntu11:14.0.0~b1~git2019121713.76597ca93-0ubuntu11:14.0.0~b1~git2019121713.76597ca93-0ubuntu21:14.0.0-0ubuntu11:14.0.1~git2020032415.de2d907fc-0ubuntu11:14.0.1~git2020041013.af9e6ba90-0ubuntu21:15.0.0-0ubuntu0.20.04.1
 None known
ironic
Ubuntu:22.04:LTS
 before 1:20.1.0-0ubuntu1.2, plus listed versions
1:18.2.0-0ubuntu11:18.2.0+git2021120910.cdc3b9538-0ubuntu11:19.0.0+git2022011216.7beadee46-0ubuntu11:20.0.0+git2022030313.4e6a3d52e-0ubuntu11:20.1.0-0ubuntu11:20.1.0-0ubuntu1.1
1:20.1.0-0ubuntu1.2
ironic
Ubuntu:24.04:LTS
 before 1:24.1.1-0ubuntu1.2, plus listed versions
1:23.0.0-0ubuntu31:23.1.0+git2024011916.a374a0c1-0ubuntu11:24.1.0-0ubuntu11:24.1.1-0ubuntu1
1:24.1.1-0ubuntu1.2
ironic-python-agent
Ubuntu:24.04:LTS
 All versions, plus listed versions
9.1.0-1ubuntu1
 None known
ironic
Ubuntu:25.10
 All versions, plus listed versions
1:29.0.0-0ubuntu11:30.0.0+git2025070713.577833d78-0ubuntu11:30.0.0+git2025070713.577833d78-0ubuntu21:32.0.0-0ubuntu11:32.0.0-0ubuntu1.1
 None known
ironic-python-agent
Ubuntu:25.10
 All versions, plus listed versions
9.14.0-510.2.0-3
 None known
ironic
Ubuntu:26.10
 All versions, plus listed versions
1:35.0.0-0ubuntu21:35.0.0-0ubuntu31:38.0.0+git20260818.101.f8e78b0-0ubuntu11:38.0.0+git2026091517.26c022f13-0ubuntu11:39.0.0-0ubuntu1
 None known
ironic-python-agent
Ubuntu:26.10
 All versions, plus listed versions
11.2.0-211.5.0-211.5.0-311.5.0-411.5.0-5
 None known
ironic
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:32.0.0-0ubuntu11:34.0.0-0ubuntu11:35.0.0-0ubuntu11:35.0.0-0ubuntu21:35.0.0-0ubuntu2.1
 None known
ironic-python-agent
Ubuntu:26.04:LTS
 All versions, plus listed versions
10.2.0-311.2.0-2
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-44082 is a medium vulnerability (CVSS 4.3) in ironic, published September 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 45th percentile. Fixed in ironic 1:21.4.4-0+deb12u1.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open