Every CVE Search/ Get API key

CVE-2026-24708

OpenStack Nova calls qemu-img without format restrictions for resize

8.2 HighFix available

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.42%Up 0.4 points since Feb 19, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.2

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
CVE-2026-24708
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-669, CWE-73
Updated
2026-11-02
EUVDEUVD-2026-7738 8.2

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
EUVD-2026-7738
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m4f3-qp2w-gwh6 8.2

OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
GHSA-m4f3-qp2w-gwh6
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Weakness
CWE-669
Updated
2026-11-02
NVD 8.2

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
CVE-2026-24708
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-669, CWE-73
Updated
2026-11-02
OSVDEBIAN-CVE-2026-24708 8.2

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
DEBIAN-CVE-2026-24708
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVGHSA-m4f3-qp2w-gwh6 8.2

OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
GHSA-m4f3-qp2w-gwh6
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Weakness
CWE-669
Updated
2026-11-02
Show 6 moreShow less
OSVPYSEC-2026-2685 8.2

OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
PYSEC-2026-2685
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54757 9.1

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

Record
RHSA-2026:54757
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:66401 7.8

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security and bug fix advisory

Record
RHSA-2026:66401
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7884 7.1

Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0.18 (openstack-nova) security update

Record
RHSA-2026:7884
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-24708 8.2

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Record
UBUNTU-CVE-2026-24708
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVUSN-8049-1 No score

nova vulnerability

Dan Smith discovered that Nova incorrectly called qemu-img without a format restriction when resizing disks. An attacker could possibly use this issue to destroy data on the host system.

Record
USN-8049-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
 32.0.0.0rc1 to 32.1.0 None known
nova
PyPI
 31.0.0.0rc1 to 31.2.0 None known
nova
PyPI
 through 30.2.1 None known
nova
Debian:12
 before 2:26.2.2-1~deb12u4, plus listed versions
2:26.1.0-42:26.2.2-1~deb12u3
2:26.2.2-1~deb12u4
nova
Debian:13
 before 2:31.0.0-6+deb13u2, plus listed versions
2:31.0.0-62:31.0.0-6+deb13u1
2:31.0.0-6+deb13u2
nova
Debian:14
 before 2:32.1.0-7, plus listed versions
2:31.0.0-62:31.0.0-72:32.0.0-12:32.0.0~rc1-12:32.0.0~rc1-2
Show 7 moreShow less
2:32.0.0~rc1-32:32.1.0-12:32.1.0-22:32.1.0-32:32.1.0-42:32.1.0-52:32.1.0-6
2:32.1.0-7
nova
Debian:11
 before 2:22.4.0-1~deb11u7, plus listed versions
2:22.0.1-22:22.0.1-2+deb11u12:22.4.0-1~deb11u52:22.4.0-1~deb11u6
2:22.4.0-1~deb11u7
nova
PyPI
 32.0.0.0rc1 to 32.1.0, plus listed versions
32.0.0
 None known
nova
PyPI
 31.0.0.0rc1 to 31.2.0, plus listed versions
31.0.031.0.131.1.0
 None known
nova
PyPI
 through 30.2.1, plus listed versions
15.1.516.1.616.1.716.1.817.0.10
Show 45 moreShow less
17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0
 None known
Show 194 moreShow less
Affected packages
PackageAffectedFixed
nova
PyPI
 through 30.2.1, 31.0.0.0rc1 to 31.2.0, 32.0.0.0rc1 to 32.1.0, plus listed versions
15.1.516.1.616.1.716.1.817.0.10
Show 45 moreShow less
17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0
 None known
collectd-sensubility
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:0.2.1-1.1.el8ost
0:0.2.1-1.1.el8ost
collectd-sensubility-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:0.2.1-1.1.el8ost
0:0.2.1-1.1.el8ost
etcd
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:3.3.23-22.el8ost
0:3.3.23-22.el8ost
etcd-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:3.3.23-22.el8ost
0:3.3.23-22.el8ost
etcd-debugsource
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:3.3.23-22.el8ost
0:3.3.23-22.el8ost
openstack-keystone
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:16.0.3-2.20260616134936.9d699a7.el8ost
1:16.0.3-2.20260616134936.9d699a7.el8ost
python3-keystone
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:16.0.3-2.20260616134936.9d699a7.el8ost
1:16.0.3-2.20260616134936.9d699a7.el8ost
python-pyasn1
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:0.4.6-4.el8ost
0:0.4.6-4.el8ost
python3-pyasn1
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:0.4.6-4.el8ost
0:0.4.6-4.el8ost
python3-pyasn1-modules
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:0.4.6-4.el8ost
0:0.4.6-4.el8ost
openstack-nova
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-api
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-common
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-compute
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-conductor
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-console
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-migration
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-novncproxy
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-scheduler
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-serialproxy
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
python3-nova
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:20.6.2-2.20260317135026.8a24acd.el8ost
1:20.6.2-2.20260317135026.8a24acd.el8ost
openstack-glance
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:19.0.5-2.20260512165254.eb6ad61.el8ost
1:19.0.5-2.20260512165254.eb6ad61.el8ost
python3-glance
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 1:19.0.5-2.20260512165254.eb6ad61.el8ost
1:19.0.5-2.20260512165254.eb6ad61.el8ost
erlang
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-asn1
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-asn1-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-compiler
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-crypto
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-crypto-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-debugsource
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-eldap
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-erl_interface-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-erts
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-erts-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-hipe
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-inets
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-kernel
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-mnesia
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-odbc-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-os_mon
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-os_mon-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-parsetools
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-public_key
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-runtime_tools
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-runtime_tools-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-sasl
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-snmp
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-ssl
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-stdlib
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-syntax_tools
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-tools
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-tools-debuginfo
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
erlang-xmerl
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:23.3.4.18-2.el8ost
0:23.3.4.18-2.el8ost
python-oslo-messaging
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:10.2.4-2.20260710155333.82281a0.el8ost
0:10.2.4-2.20260710155333.82281a0.el8ost
python3-oslo-messaging
Red Hat:openstack:16.2::el8
From an advisory covering 24 CVEs
 before 0:10.2.4-2.20260710155333.82281a0.el8ost
0:10.2.4-2.20260710155333.82281a0.el8ost
ansible-collection-ansible-posix
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.2.0-1.4.el9ost
0:1.2.0-1.4.el9ost
ansible-collections-openstack
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.9.1-17.1.20260318160829.0e9a6f2.el9ost
0:1.9.1-17.1.20260318160829.0e9a6f2.el9ost
collectd-sensubility
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:0.2.1-6.el9ost
0:0.2.1-6.el9ost
collectd-sensubility-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:0.2.1-6.el9ost
0:0.2.1-6.el9ost
erlang
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-asn1
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-asn1-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-compiler
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-crypto
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-crypto-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-debugsource
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-eldap
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-erl_interface-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-erts
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-erts-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-inets
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-kernel
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-mnesia
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-odbc-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-os_mon
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-os_mon-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-parsetools
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-public_key
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-runtime_tools
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-runtime_tools-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-sasl
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-snmp
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-ssl
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-stdlib
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-syntax_tools
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-tools
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-tools-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
erlang-xmerl
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:24.3.4.2-7.el9ost
0:24.3.4.2-7.el9ost
etcd
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:3.4.26-9.6.el9ost
0:3.4.26-9.6.el9ost
etcd-debuginfo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:3.4.26-9.6.el9ost
0:3.4.26-9.6.el9ost
etcd-debugsource
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:3.4.26-9.6.el9ost
0:3.4.26-9.6.el9ost
octavia-amphora-image-fips-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
octavia-amphora-image-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
openstack-cinder
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
openstack-dashboard
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
openstack-heat
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-heat-api
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-heat-api-cfn
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-heat-common
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-heat-engine
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-heat-monolith
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:16.1.1-17.1.20260713101101.edc6d60.el9ost
1:16.1.1-17.1.20260713101101.edc6d60.el9ost
openstack-ironic
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:17.1.1-17.1.20260721220909.c31db88.el9ost
1:17.1.1-17.1.20260721220909.c31db88.el9ost
openstack-ironic-api
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:17.1.1-17.1.20260721220909.c31db88.el9ost
1:17.1.1-17.1.20260721220909.c31db88.el9ost
openstack-ironic-common
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:17.1.1-17.1.20260721220909.c31db88.el9ost
1:17.1.1-17.1.20260721220909.c31db88.el9ost
openstack-ironic-conductor
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:17.1.1-17.1.20260721220909.c31db88.el9ost
1:17.1.1-17.1.20260721220909.c31db88.el9ost
openstack-ironic-python-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:7.1.1-17.1.20260803104219.0211fa9.el9ost
0:7.1.1-17.1.20260803104219.0211fa9.el9ost
openstack-keystone
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:19.0.2-17.1.20260630150819.54dd95d.el9ost
1:19.0.2-17.1.20260630150819.54dd95d.el9ost
openstack-neutron
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-common
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-linuxbridge
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-macvtap-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-metering-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-ml2
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-openvswitch
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-ovn-metadata-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-ovn-migration-tool
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-rpc-server
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-neutron-sriov-nic-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-nova
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-api
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-common
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-compute
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-conductor
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-migration
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-novncproxy
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-scheduler
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-serialproxy
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
openstack-selinux
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:0.8.37-17.1.20260107141051.05dd1b2.el9ost
0:0.8.37-17.1.20260107141051.05dd1b2.el9ost
openstack-swift
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
openstack-swift-account
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
openstack-swift-container
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
openstack-swift-object
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
openstack-swift-proxy
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
openstack-tripleo-heat-templates
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:14.3.1-17.1.20260803105013.e7c7ce3.el9ost
0:14.3.1-17.1.20260803105013.e7c7ce3.el9ost
os-net-config
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:14.2.1-17.1.20260803103231.61d7bd7.el9ost
0:14.2.1-17.1.20260803103231.61d7bd7.el9ost
puppet-rabbitmq
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:11.0.1-17.1.20260306080955.63fee2c.el9ost
0:11.0.1-17.1.20260306080955.63fee2c.el9ost
puppet-tripleo
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:14.2.3-17.1.20260206090839.40278e1.el9ost
0:14.2.3-17.1.20260206090839.40278e1.el9ost
python-cinder-tests-tempest
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-17.1.20260114160833.0e94611.el9ost
0:1.8.0-17.1.20260114160833.0e94611.el9ost
python-django-horizon
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
python-glance-store
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.5.1-17.1.20260225150839.5f1cee6.el9ost
0:2.5.1-17.1.20260225150839.5f1cee6.el9ost
python-os-brick
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:4.3.4-17.1.20260324150947.cf69f92.el9ost
0:4.3.4-17.1.20260324150947.cf69f92.el9ost
python-oslo-messaging
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost
0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost
python-oslo-serialization
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost
0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost
python-ovsdbapp
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.9.4-17.1.20260304101059.65d02f0.el9ost
0:1.9.4-17.1.20260304101059.65d02f0.el9ost
python3-cinder
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
python3-cinder-common
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
1:18.2.2-17.1.20260702111621.f6b44fc.el9ost
python3-cinder-tests-tempest
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-17.1.20260114160833.0e94611.el9ost
0:1.8.0-17.1.20260114160833.0e94611.el9ost
python3-django-horizon
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
1:19.4.1-17.1.20260630130603.9b1a13e.el9ost
python3-glance-store
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.5.1-17.1.20260225150839.5f1cee6.el9ost
0:2.5.1-17.1.20260225150839.5f1cee6.el9ost
python3-ironic-python-agent
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:7.1.1-17.1.20260803104219.0211fa9.el9ost
0:7.1.1-17.1.20260803104219.0211fa9.el9ost
python3-keystone
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:19.0.2-17.1.20260630150819.54dd95d.el9ost
1:19.0.2-17.1.20260630150819.54dd95d.el9ost
python3-neutron
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:18.6.1-17.1.20260810120959.85ff760.el9ost
1:18.6.1-17.1.20260810120959.85ff760.el9ost
python3-nova
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 1:23.2.3-17.1.20260810140853.2ace99d.el9ost
1:23.2.3-17.1.20260810140853.2ace99d.el9ost
python3-os-brick
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:4.3.4-17.1.20260324150947.cf69f92.el9ost
0:4.3.4-17.1.20260324150947.cf69f92.el9ost
python3-oslo-messaging
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost
0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost
python3-oslo-serialization
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost
0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost
python3-ovsdbapp
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:1.9.4-17.1.20260304101059.65d02f0.el9ost
0:1.9.4-17.1.20260304101059.65d02f0.el9ost
python3-swift
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:2.27.1-17.1.20260806131309.16dbcae.el9ost
0:2.27.1-17.1.20260806131309.16dbcae.el9ost
rhosp-director-images
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-all
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-base
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-fips-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-ipa-fips-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-ipa-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-metadata
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-minimal
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-minimal-fips
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-multirhel-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-uefi-fips-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-uefi-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
rhosp-director-images-x86_64
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:17.1-20260901.1.el9ost
0:17.1-20260901.1.el9ost
tripleo-ansible
Red Hat:openstack:17.1::el9
From an advisory covering 7 CVEs
 before 0:3.3.1-17.1.20260603190918.8debef3.el9ost
0:3.3.1-17.1.20260603190918.8debef3.el9ost
openstack-nova
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-api
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-common
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-compute
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-conductor
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-migration
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-novncproxy
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-scheduler
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-serialproxy
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
python3-nova
Red Hat:openstack:18.0::el9
 before 1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
1:27.5.2-18.0.20260312122217.c1c6d67.el9ost
nova
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:12.0.0-0ubuntu22:13.0.0~b1-0ubuntu12:13.0.0~b2-0ubuntu12:13.0.0~b3-0ubuntu12:13.0.0~rc1-0ubuntu1
Show 19 moreShow less
2:13.0.0~rc3-0ubuntu12:13.0.0-0ubuntu12:13.0.0-0ubuntu22:13.0.0-0ubuntu52:13.1.0-0ubuntu12:13.1.1-0ubuntu12:13.1.1-0ubuntu1.12:13.1.2-0ubuntu22:13.1.3-0ubuntu12:13.1.3-0ubuntu22:13.1.4-0ubuntu12:13.1.4-0ubuntu22:13.1.4-0ubuntu32:13.1.4-0ubuntu4.12:13.1.4-0ubuntu4.22:13.1.4-0ubuntu4.32:13.1.4-0ubuntu4.42:13.1.4-0ubuntu4.52:13.1.4-0ubuntu4.5+esm1
 None known
nova
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:16.0.1-0ubuntu12:16.0.1-0ubuntu22:17.0.0~b1-0ubuntu12:17.0.0~b2-0ubuntu22:17.0.0~b3-0ubuntu3
Show 28 moreShow less
2:17.0.0~b3-0ubuntu42:17.0.0~rc1-0ubuntu12:17.0.0~rc2-0ubuntu12:17.0.0~rc3-0ubuntu12:17.0.0-0ubuntu12:17.0.1-0ubuntu12:17.0.3-0ubuntu12:17.0.4-0ubuntu12:17.0.5-0ubuntu12:17.0.5-0ubuntu22:17.0.6-0ubuntu12:17.0.7-0ubuntu12:17.0.7-0ubuntu22:17.0.9-0ubuntu12:17.0.9-0ubuntu32:17.0.10-0ubuntu22:17.0.10-0ubuntu2.12:17.0.11-0ubuntu12:17.0.12-0ubuntu12:17.0.13-0ubuntu12:17.0.13-0ubuntu22:17.0.13-0ubuntu32:17.0.13-0ubuntu42:17.0.13-0ubuntu52:17.0.13-0ubuntu5.22:17.0.13-0ubuntu5.32:17.0.13-0ubuntu5.42:17.0.13-0ubuntu5.4+esm1
 None known
nova
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:20.0.0-0ubuntu12:21.0.0~b1~git2019120415.45fb747c98-0ubuntu12:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu22:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu42:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5
Show 24 moreShow less
2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu22:21.0.0-0ubuntu0.20.04.12:21.0.0-0ubuntu0.20.04.22:21.1.0-0ubuntu12:21.1.1-0ubuntu22:21.1.2-0ubuntu12:21.2.0-0ubuntu12:21.2.1-0ubuntu12:21.2.2-0ubuntu12:21.2.3-0ubuntu12:21.2.4-0ubuntu12:21.2.4-0ubuntu22:21.2.4-0ubuntu2.12:21.2.4-0ubuntu2.22:21.2.4-0ubuntu2.32:21.2.4-0ubuntu2.42:21.2.4-0ubuntu2.52:21.2.4-0ubuntu2.62:21.2.4-0ubuntu2.82:21.2.4-0ubuntu2.112:21.2.4-0ubuntu2.132:21.2.4-0ubuntu2.142:21.2.4-0ubuntu2.14+esm12:21.2.4-0ubuntu2.14+esm2
 None known
nova
Ubuntu:22.04:LTS
 before 3:25.2.1-0ubuntu2.10, plus listed versions
3:24.0.0-0ubuntu13:24.0.0+git2022030310.3f274c65cc-0ubuntu23:25.0.0-0ubuntu13:25.0.0-0ubuntu1.13:25.0.1-0ubuntu1
Show 14 moreShow less
3:25.1.0-0ubuntu13:25.1.0-0ubuntu23:25.1.0-0ubuntu2.13:25.1.0-0ubuntu2.23:25.1.1-0ubuntu13:25.1.1-0ubuntu1.13:25.2.0-0ubuntu13:25.2.1-0ubuntu13:25.2.1-0ubuntu23:25.2.1-0ubuntu2.33:25.2.1-0ubuntu2.63:25.2.1-0ubuntu2.73:25.2.1-0ubuntu2.83:25.2.1-0ubuntu2.9
3:25.2.1-0ubuntu2.10
nova
Ubuntu:24.04:LTS
 before 3:29.2.0-0ubuntu1.3, plus listed versions
3:28.0.0-0ubuntu13:28.0.1+git2024011916.087c372a-0ubuntu13:28.0.1+git2024011916.087c372a-0ubuntu23:29.0.0~rc1-0ubuntu23:29.0.1-0ubuntu1
Show 5 moreShow less
3:29.0.1-0ubuntu1.33:29.0.1-0ubuntu1.43:29.2.0-0ubuntu13:29.2.0-0ubuntu1.13:29.2.0-0ubuntu1.2
3:29.2.0-0ubuntu1.3
nova
Ubuntu:25.10
 before 3:32.0.0-0ubuntu1.1, plus listed versions
3:31.0.0-0ubuntu13:31.0.0+git2025070714.1c03429337-0ubuntu13:31.0.0+git2025070714.1c03429337-0ubuntu23:32.0.0~rc1-0ubuntu13:32.0.0-0ubuntu1
3:32.0.0-0ubuntu1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-24708 is a high vulnerability (CVSS 8.2) in Openstack Nova, published February 17, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in nova 2:26.2.2-1~deb12u4.

References

Show 191 moreShow less
This page doesn't list everything

Left out here: 154 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open