{"id":"CVE-2024-32498","aliases":["DEBIAN-CVE-2024-32498","DLA-3871-1","DLA-3872-1","DLA-3873-1","DSA-5754-1","DSA-5755-1","DSA-5756-1","EUVD-2024-2409","GHSA-r4v4-w9pv-6fph","PYSEC-2026-1708","PYSEC-2026-2414","PYSEC-2026-2493","RHSA-2024:4272","RHSA-2024:4273","RHSA-2024:4274","RHSA-2024:4425","UBUNTU-CVE-2024-32498","USN-6882-1","USN-6882-2","USN-6883-1","USN-6884-1","USN-8199-1"],"status":"published","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00835,"percentile":0.58009,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-552"],"published":"2024-07-02T15:00:00Z","modified":"2026-11-02T12:02:24Z","fixes":[{"ecosystem":"Debian:12","package":"cinder","fixed_in":["2:21.3.1-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cinder","fixed_in":["2:24.0.0-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cinder","fixed_in":["2:24.0.0-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glance","fixed_in":["2:25.1.0-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glance","fixed_in":["2:28.0.1-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glance","fixed_in":["2:28.0.1-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2:26.2.2-1~deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2:29.0.2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2:29.0.2-4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"glance","fixed_in":["2:21.1.0-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"nova","fixed_in":["2:22.4.0-1~deb11u5"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-cinder","fixed_in":["1:18.2.2-17.1.20231011140829.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-glance","fixed_in":["1:22.1.2-17.1.20230621071326.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-api","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-common","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-compute","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-conductor","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-migration","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-novncproxy","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-scheduler","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-serialproxy","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-cinder","fixed_in":["1:18.2.2-17.1.20231011140829.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-cinder-common","fixed_in":["1:18.2.2-17.1.20231011140829.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-glance","fixed_in":["1:22.1.2-17.1.20230621071326.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-nova","fixed_in":["1:23.2.3-17.1.20231018130828.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-cinder","fixed_in":["1:15.6.1-2.20230906144858.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-glance","fixed_in":["1:19.0.5-2.20230310205021.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-api","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-common","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-compute","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-conductor","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-console","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-migration","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-novncproxy","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-scheduler","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-serialproxy","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-cinder","fixed_in":["1:15.6.1-2.20230906144858.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-glance","fixed_in":["1:19.0.5-2.20230310205021.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-nova","fixed_in":["1:20.6.2-2.20230814165228.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova","fixed_in":["1:23.2.3-17.1.20231018123754.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-common","fixed_in":["1:23.2.3-17.1.20231018123754.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-compute","fixed_in":["1:23.2.3-17.1.20231018123754.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-migration","fixed_in":["1:23.2.3-17.1.20231018123754.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-nova","fixed_in":["1:23.2.3-17.1.20231018123754.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-cinder","fixed_in":["1:15.4.0-1.20230510003503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-glance","fixed_in":["1:19.0.4-1.20230310213451.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-api","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-common","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-compute","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-conductor","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-console","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-migration","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-novncproxy","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-scheduler","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-serialproxy","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-cinder","fixed_in":["1:15.4.0-1.20230510003503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-glance","fixed_in":["1:19.0.4-1.20230310213451.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-nova","fixed_in":["1:20.4.1-1.20221005193234.el8ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glance","fixed_in":["2:12.0.0-0ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glance","fixed_in":["2:16.0.1-0ubuntu1.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cinder","fixed_in":["2:16.4.2-0ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"glance","fixed_in":["2:20.2.0-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nova","fixed_in":["2:21.2.4-0ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cinder","fixed_in":["2:20.3.1-0ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"glance","fixed_in":["2:24.2.1-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nova","fixed_in":["3:25.2.1-0ubuntu2.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"cinder","fixed_in":["2:24.0.0-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"glance","fixed_in":["2:28.0.1-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nova","fixed_in":["3:29.0.1-0ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"glance","fixed_in":["2:20.2.0-0ubuntu1.2+esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"24.0.0"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"28.0.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"29.0.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.3.1-1~deb12u1"}]}],"versions":["2:21.1.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.1.0-2+deb12u1"}]}],"versions":["2:25.1.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.1-3+deb12u1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.1-3+deb12u1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:26.2.2-1~deb12u3"}]}],"versions":["2:26.1.0-4"]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:29.0.2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:29.0.2-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.4.0-1~deb11u2"}]}],"versions":["2:17.0.1-1","2:17.0.1-1+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.0-1+deb11u2"}]}],"versions":["2:21.0.0-2","2:21.0.0-2+deb11u1"]},{"source":"osv","ecosystem":"Debian:11","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:22.4.0-1~deb11u5"}]}],"versions":["2:22.0.1-2","2:22.0.1-2+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.3.1-1~deb12u1"}]}],"versions":["2:21.1.0-3"]},{"source":"osv","ecosystem":"Debian:12","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.1.0-2+deb12u1"}]}],"versions":["2:25.1.0-2"]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:26.2.2-1~deb12u3"}]}],"versions":["2:26.1.0-4"]},{"source":"osv","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"24.0.0"}]}],"versions":["10.0.8","11.2.0","11.2.1","11.2.2","12.0.10","12.0.4","12.0.5","12.0.6","12.0.7","12.0.8","12.0.9","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","13.0.8","13.0.9","14.0.0","14.0.0.0rc1","14.0.0.0rc2","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.2.1","14.3.0","14.3.1","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.1.0","15.2.0","15.3.0","15.4.0","15.4.1","15.5.0","15.6.0","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.0.0.0rc3","16.1.0","16.2.0","16.2.1","16.3.0","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","17.1.0","17.2.0","17.3.0","17.4.0","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.2.0","18.2.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.1.1","19.2.0","19.3.0","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","20.3.0","20.3.1","20.3.2","21.0.0","21.0.0.0rc2","21.1.0","21.2.0","21.3.0","21.3.1","21.3.2","22.0.0","22.0.0.0rc1","22.0.0.0rc2","22.1.0","22.1.1","22.1.2","22.2.0","22.3.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.1.0","23.2.0","23.3.0","23.4.0","23.5.0","24.0.0","24.0.0.0rc1","24.0.0.0rc2"]},{"source":"osv","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"28.0.1"}]}],"versions":["15.0.2","17.0.1","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.0.4","20.0.0","20.0.0.0b1","20.0.0.0b2","20.0.0.0b3","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","21.0.0","21.0.0.0b1","21.0.0.0b2","21.0.0.0rc1","21.0.0.0rc2","21.1.0","22.0.0","22.0.0.0b2","22.0.0.0b3","22.0.0.0rc1","22.1.0","22.1.1","23.0.0","23.0.0.0b2","23.0.0.0b3","23.0.0.0rc1","23.0.0.0rc2","23.1.0","24.0.0","24.0.0.0rc1","24.1.0","24.2.0","24.2.1","25.0.0","25.0.0.0b2","25.0.0.0b3","25.0.0.0rc1","25.1.0","26.0.0","26.0.0.0b2","26.0.0.0b3","26.0.0.0rc1","26.1.0","27.0.0","27.0.0.0b1","27.0.0.0b2","27.0.0.0rc1","27.1.0","27.1.1","28.0.0","28.0.0.0b2","28.0.0.0rc1","28.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"29.0.2"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.12","17.0.13","17.0.7","17.0.8","17.0.9","18.0.2","18.0.3","18.1.0","18.2.0","18.2.1","18.2.2","18.2.3","18.3.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.1.0","19.2.0","19.3.0","19.3.1","19.3.2","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.1.1","20.2.0","20.3.0","20.4.0","20.4.1","20.5.0","20.6.0","20.6.1","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","21.2.2","21.2.3","21.2.4","22.0.0","22.0.0.0rc1","22.0.1","22.1.0","22.2.0","22.2.1","22.2.2","22.3.0","22.4.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.0.1","23.0.2","23.1.0","23.2.0","23.2.1","23.2.2","24.0.0","24.0.0.0rc1","24.0.0.0rc2","24.1.0","24.1.1","24.2.0","24.2.1","25.0.0","25.0.0.0rc1","25.0.1","25.1.0","25.1.1","25.2.0","25.2.1","25.3.0","26.0.0","26.0.0.0rc1","26.0.0.0rc2","26.1.0","26.1.1","26.2.0","26.2.1","26.2.2","26.3.0","27.0.0","27.0.0.0rc1","27.1.0","27.2.0","27.3.0","27.4.0","27.5.0","27.5.1","28.0.0","28.0.0.0rc1","28.0.1","28.1.0","28.2.0","28.3.0","28.3.1","29.0.0","29.0.0.0rc1","29.0.1","29.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"29.0.2"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.12","17.0.13","17.0.7","17.0.8","17.0.9","18.0.2","18.0.3","18.1.0","18.2.0","18.2.1","18.2.2","18.2.3","18.3.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.1.0","19.2.0","19.3.0","19.3.1","19.3.2","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.1.1","20.2.0","20.3.0","20.4.0","20.4.1","20.5.0","20.6.0","20.6.1","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","21.2.2","21.2.3","21.2.4","22.0.0","22.0.0.0rc1","22.0.1","22.1.0","22.2.0","22.2.1","22.2.2","22.3.0","22.4.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.0.1","23.0.2","23.1.0","23.2.0","23.2.1","23.2.2","24.0.0","24.0.0.0rc1","24.0.0.0rc2","24.1.0","24.1.1","24.2.0","24.2.1","25.0.0","25.0.0.0rc1","25.0.1","25.1.0","25.1.1","25.2.0","25.2.1","25.3.0","26.0.0","26.0.0.0rc1","26.0.0.0rc2","26.1.0","26.1.1","26.2.0","26.2.1","26.2.2","26.3.0","27.0.0","27.0.0.0rc1","27.1.0","27.2.0","27.3.0","27.4.0","27.5.0","27.5.1","28.0.0","28.0.0.0rc1","28.0.1","28.1.0","28.2.0","28.3.0","28.3.1","29.0.0","29.0.0.0rc1","29.0.1","29.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"24.0.0"}]}],"versions":["10.0.8","11.2.0","11.2.1","11.2.2","12.0.10","12.0.4","12.0.5","12.0.6","12.0.7","12.0.8","12.0.9","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","13.0.8","13.0.9","14.0.0","14.0.0.0rc1","14.0.0.0rc2","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.2.1","14.3.0","14.3.1","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.1.0","15.2.0","15.3.0","15.4.0","15.4.1","15.5.0","15.6.0","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.0.0.0rc3","16.1.0","16.2.0","16.2.1","16.3.0","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","17.1.0","17.2.0","17.3.0","17.4.0","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.2.0","18.2.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.1.1","19.2.0","19.3.0","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","20.3.0","20.3.1","20.3.2","21.0.0","21.0.0.0rc2","21.1.0","21.2.0","21.3.0","21.3.1","21.3.2","22.0.0","22.0.0.0rc1","22.0.0.0rc2","22.1.0","22.1.1","22.1.2","22.2.0","22.3.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.1.0","23.2.0","23.3.0","23.4.0","23.5.0","24.0.0","24.0.0.0rc1","24.0.0.0rc2"]},{"source":"osv","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"28.0.1"}]}],"versions":["15.0.2","17.0.1","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.0.4","20.0.0","20.0.0.0b1","20.0.0.0b2","20.0.0.0b3","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","21.0.0","21.0.0.0b1","21.0.0.0b2","21.0.0.0rc1","21.0.0.0rc2","21.1.0","22.0.0","22.0.0.0b2","22.0.0.0b3","22.0.0.0rc1","22.1.0","22.1.1","23.0.0","23.0.0.0b2","23.0.0.0b3","23.0.0.0rc1","23.0.0.0rc2","23.1.0","24.0.0","24.0.0.0rc1","24.1.0","24.2.0","24.2.1","25.0.0","25.0.0.0b2","25.0.0.0b3","25.0.0.0rc1","25.1.0","26.0.0","26.0.0.0b2","26.0.0.0b3","26.0.0.0rc1","26.1.0","27.0.0","27.0.0.0b1","27.0.0.0b2","27.0.0.0rc1","27.1.0","27.1.1","28.0.0","28.0.0.0b2","28.0.0.0rc1","28.0.1"]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.2-17.1.20231011140829.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.1.2-17.1.20230621071326.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.2-17.1.20231011140829.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-cinder-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.2-17.1.20231011140829.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.1.2-17.1.20230621071326.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018130828.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.6.1-2.20230906144858.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20230310205021.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.6.1-2.20230906144858.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20230310205021.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20230814165228.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018123754.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018123754.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018123754.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018123754.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.3-17.1.20231018123754.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.4.0-1.20230510003503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.4-1.20230310213451.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.4.0-1.20230510003503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.4-1.20230310213451.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193234.el8ost"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.0.0-0ubuntu2+esm1"}]}],"versions":["2:11.0.0-0ubuntu1","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu1","2:12.0.0~b3-0ubuntu1","2:12.0.0~rc1-0ubuntu1","2:12.0.0-0ubuntu1","2:12.0.0-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.0.0-0ubuntu1","2:8.0.0~b1-0ubuntu1","2:8.0.0~b2-0ubuntu2","2:8.0.0~b3-0ubuntu2","2:8.0.0~rc1-0ubuntu2","2:8.0.0-0ubuntu1","2:8.1.0-0ubuntu1","2:8.1.1-0ubuntu1","2:8.1.1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:12.0.0-0ubuntu2","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc3-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.0-0ubuntu2","2:13.0.0-0ubuntu5","2:13.1.0-0ubuntu1","2:13.1.1-0ubuntu1","2:13.1.1-0ubuntu1.1","2:13.1.2-0ubuntu2","2:13.1.3-0ubuntu1","2:13.1.3-0ubuntu2","2:13.1.4-0ubuntu1","2:13.1.4-0ubuntu2","2:13.1.4-0ubuntu3","2:13.1.4-0ubuntu4.1","2:13.1.4-0ubuntu4.2","2:13.1.4-0ubuntu4.3","2:13.1.4-0ubuntu4.4","2:13.1.4-0ubuntu4.5","2:13.1.4-0ubuntu4.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:11.0.0-0ubuntu2","2:11.0.0-0ubuntu3","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu2","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0~rc2-0ubuntu2","2:12.0.0-0ubuntu1","2:12.0.1-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.4-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.7-0ubuntu2","2:12.0.9-0ubuntu1","2:12.0.9-0ubuntu1.2","2:12.0.10-0ubuntu1","2:12.0.10-0ubuntu2","2:12.0.10-0ubuntu2.2","2:12.0.10-0ubuntu2.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.0.1-0ubuntu1.1+esm2"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2-0ubuntu2","2:16.0.0~rc1-0ubuntu1","2:16.0.0~rc2-0ubuntu1","2:16.0.0~rc3-0ubuntu1","2:16.0.0-0ubuntu1","2:16.0.1-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2","2:17.0.10-0ubuntu2.1","2:17.0.11-0ubuntu1","2:17.0.12-0ubuntu1","2:17.0.13-0ubuntu1","2:17.0.13-0ubuntu2","2:17.0.13-0ubuntu3","2:17.0.13-0ubuntu4","2:17.0.13-0ubuntu5","2:17.0.13-0ubuntu5.2","2:17.0.13-0ubuntu5.3","2:17.0.13-0ubuntu5.4","2:17.0.13-0ubuntu5.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.8"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2","2:16.4.2-0ubuntu2.3","2:16.4.2-0ubuntu2.4","2:16.4.2-0ubuntu2.5","2:16.4.2-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.2"}]}],"versions":["2:19.0.0-0ubuntu1","2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1","2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1","2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2","2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1","2:20.0.0-0ubuntu0.20.04.1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.2.4-0ubuntu2.8"}]}],"versions":["2:20.0.0-0ubuntu1","2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5","2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2","2:21.0.0-0ubuntu0.20.04.1","2:21.0.0-0ubuntu0.20.04.2","2:21.1.0-0ubuntu1","2:21.1.1-0ubuntu2","2:21.1.2-0ubuntu1","2:21.2.0-0ubuntu1","2:21.2.1-0ubuntu1","2:21.2.2-0ubuntu1","2:21.2.3-0ubuntu1","2:21.2.4-0ubuntu1","2:21.2.4-0ubuntu2","2:21.2.4-0ubuntu2.1","2:21.2.4-0ubuntu2.2","2:21.2.4-0ubuntu2.3","2:21.2.4-0ubuntu2.4","2:21.2.4-0ubuntu2.5","2:21.2.4-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.3.1-0ubuntu1.4"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.1.0-0ubuntu2.1","2:20.1.0-0ubuntu2.2","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1","2:20.3.0-0ubuntu1","2:20.3.1-0ubuntu1","2:20.3.1-0ubuntu1.1","2:20.3.1-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.2.1-0ubuntu1.2"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0+git2021120811.4ee7799aa-0ubuntu1","2:23.0.0+git2022011216.502fa0ffc-0ubuntu1","2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1","2:24.0.0-0ubuntu1","2:24.1.0-0ubuntu1","2:24.1.0-0ubuntu1.1","2:24.2.0-0ubuntu1","2:24.2.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:25.2.1-0ubuntu2.3"}]}],"versions":["3:24.0.0-0ubuntu1","3:24.0.0+git2022030310.3f274c65cc-0ubuntu2","3:25.0.0-0ubuntu1","3:25.0.0-0ubuntu1.1","3:25.0.1-0ubuntu1","3:25.1.0-0ubuntu1","3:25.1.0-0ubuntu2","3:25.1.0-0ubuntu2.1","3:25.1.0-0ubuntu2.2","3:25.1.1-0ubuntu1","3:25.1.1-0ubuntu1.1","3:25.2.0-0ubuntu1","3:25.2.1-0ubuntu1","3:25.2.1-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-0ubuntu1.2"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0-0ubuntu3","2:23.0.0+git2024011915.b8cd101f-0ubuntu1","2:23.0.0+git2024011915.b8cd101f-0ubuntu2","2:24.0.0~rc1-0ubuntu1","2:24.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.1-0ubuntu1.2"}]}],"versions":["2:27.0.0-0ubuntu1","2:28.0.0~b2+git2024011916.f429b53e-0ubuntu1","2:28.0.0~rc1-0ubuntu1","2:28.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:29.0.1-0ubuntu1.3"}]}],"versions":["3:28.0.0-0ubuntu1","3:28.0.1+git2024011916.087c372a-0ubuntu1","3:28.0.1+git2024011916.087c372a-0ubuntu2","3:29.0.0~rc1-0ubuntu2","3:29.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.8"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2","2:16.4.2-0ubuntu2.3","2:16.4.2-0ubuntu2.4","2:16.4.2-0ubuntu2.5","2:16.4.2-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.3.1-0ubuntu1.4"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.1.0-0ubuntu2.1","2:20.1.0-0ubuntu2.2","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1","2:20.3.0-0ubuntu1","2:20.3.1-0ubuntu1","2:20.3.1-0ubuntu1.1","2:20.3.1-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-0ubuntu1.2"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0-0ubuntu3","2:23.0.0+git2024011915.b8cd101f-0ubuntu1","2:23.0.0+git2024011915.b8cd101f-0ubuntu2","2:24.0.0~rc1-0ubuntu1","2:24.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.9"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2","2:16.4.2-0ubuntu2.3","2:16.4.2-0ubuntu2.4","2:16.4.2-0ubuntu2.5","2:16.4.2-0ubuntu2.6","2:16.4.2-0ubuntu2.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.3.1-0ubuntu1.5"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.1.0-0ubuntu2.1","2:20.1.0-0ubuntu2.2","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1","2:20.3.0-0ubuntu1","2:20.3.1-0ubuntu1","2:20.3.1-0ubuntu1.1","2:20.3.1-0ubuntu1.2","2:20.3.1-0ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-0ubuntu1.3"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0-0ubuntu3","2:23.0.0+git2024011915.b8cd101f-0ubuntu1","2:23.0.0+git2024011915.b8cd101f-0ubuntu2","2:24.0.0~rc1-0ubuntu1","2:24.0.0-0ubuntu1","2:24.0.0-0ubuntu1.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.2"}]}],"versions":["2:19.0.0-0ubuntu1","2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1","2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1","2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2","2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1","2:20.0.0-0ubuntu0.20.04.1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.2.1-0ubuntu1.2"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0+git2021120811.4ee7799aa-0ubuntu1","2:23.0.0+git2022011216.502fa0ffc-0ubuntu1","2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1","2:24.0.0-0ubuntu1","2:24.1.0-0ubuntu1","2:24.1.0-0ubuntu1.1","2:24.2.0-0ubuntu1","2:24.2.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.1-0ubuntu1.2"}]}],"versions":["2:27.0.0-0ubuntu1","2:28.0.0~b2+git2024011916.f429b53e-0ubuntu1","2:28.0.0~rc1-0ubuntu1","2:28.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.2.4-0ubuntu2.8"}]}],"versions":["2:20.0.0-0ubuntu1","2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5","2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2","2:21.0.0-0ubuntu0.20.04.1","2:21.0.0-0ubuntu0.20.04.2","2:21.1.0-0ubuntu1","2:21.1.1-0ubuntu2","2:21.1.2-0ubuntu1","2:21.2.0-0ubuntu1","2:21.2.1-0ubuntu1","2:21.2.2-0ubuntu1","2:21.2.3-0ubuntu1","2:21.2.4-0ubuntu1","2:21.2.4-0ubuntu2","2:21.2.4-0ubuntu2.1","2:21.2.4-0ubuntu2.2","2:21.2.4-0ubuntu2.3","2:21.2.4-0ubuntu2.4","2:21.2.4-0ubuntu2.5","2:21.2.4-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:25.2.1-0ubuntu2.3"}]}],"versions":["3:24.0.0-0ubuntu1","3:24.0.0+git2022030310.3f274c65cc-0ubuntu2","3:25.0.0-0ubuntu1","3:25.0.0-0ubuntu1.1","3:25.0.1-0ubuntu1","3:25.1.0-0ubuntu1","3:25.1.0-0ubuntu2","3:25.1.0-0ubuntu2.1","3:25.1.0-0ubuntu2.2","3:25.1.1-0ubuntu1","3:25.1.1-0ubuntu1.1","3:25.2.0-0ubuntu1","3:25.2.1-0ubuntu1","3:25.2.1-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:29.0.1-0ubuntu1.3"}]}],"versions":["3:28.0.0-0ubuntu1","3:28.0.1+git2024011916.087c372a-0ubuntu1","3:28.0.1+git2024011916.087c372a-0ubuntu2","3:29.0.0~rc1-0ubuntu2","3:29.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.0.0-0ubuntu2+esm1"}]}],"versions":["2:11.0.0-0ubuntu1","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu1","2:12.0.0~b3-0ubuntu1","2:12.0.0~rc1-0ubuntu1","2:12.0.0-0ubuntu1","2:12.0.0-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.0.1-0ubuntu1.1+esm2"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2-0ubuntu2","2:16.0.0~rc1-0ubuntu1","2:16.0.0~rc2-0ubuntu1","2:16.0.0~rc3-0ubuntu1","2:16.0.0-0ubuntu1","2:16.0.1-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.2+esm2"}]}],"versions":["2:19.0.0-0ubuntu1","2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1","2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1","2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2","2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1","2:20.0.0-0ubuntu0.20.04.1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1","2:20.2.0-0ubuntu1.2"]}],"products":[{"vendor":"openstack","product":"cinder"},{"vendor":"openstack","product":"glance"},{"vendor":"openstack","product":"nova"}],"references":[{"url":"https://launchpad.net/bugs/2059809","tags":["x_transferred","Issue Tracking","Patch","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/02/2","tags":["mailing-list","article","web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/07/02/2","tags":["x_transferred","Mailing List","Patch","web","article","report"]},{"url":"https://security.openstack.org/ossa/OSSA-2024-001.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00016.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00017.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32498","tags":["advisory"]},{"url":"https://github.com/openstack/cinder/commit/78f85c1f9b20a067ef64d6451dee0228c3a0db5e","tags":["web"]},{"url":"https://github.com/openstack/cinder/commit/d6a186945e03649343af55b46ed8dfe0dd326e40","tags":["web"]},{"url":"https://github.com/openstack/glance/commit/22f0c9c6f98db1d93569e3edb800c271f35b0ef9","tags":["web"]},{"url":"https://github.com/openstack/glance/commit/2e65391744a82421bc6f026ee8f1f3550038f175","tags":["web"]},{"url":"https://github.com/openstack/glance/commit/867d1dd8b6e4f5774257a98c7c33061fbbbde973","tags":["web"]},{"url":"https://github.com/openstack/glance/commit/cc7d53adbecf85f3d7df78e7618fe8ab3a075c5f","tags":["web"]},{"url":"https://github.com/openstack/glance/commit/d607e78630cc9d1ca18b3a027322809c042f64df","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/657e86585cc57f84ab9b364dd189547d231d5927","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r4v4-w9pv-6fph","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32498.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-32498","tags":["advisory"]},{"url":"https://pypi.org/project/nova","tags":["package"]},{"url":"https://pypi.org/project/cinder","tags":["package"]},{"url":"https://pypi.org/project/glance","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4272","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278663","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4272.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-32498","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-32498","tags":["advisory","report"]},{"url":"https://bugs.launchpad.net/nova/+bug/2059809","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4273","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4273.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4274","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4274.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4425","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4425.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-32498","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6882-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6883-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6884-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6882-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8199-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-47951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34881","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-32498","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T16:12:13.552Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:34:15.662528Z"}],"euvd":[{"id":"EUVD-2024-2409","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T16:12:13Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:28.888576Z"}],"ghsa":[{"id":"GHSA-r4v4-w9pv-6fph","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T03:30:42Z","modified":"2025-11-04T19:46:53Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-552"],"updated_at":"2026-11-02T14:39:06.376137Z"}],"nvd":[{"id":"CVE-2024-32498","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T02:15:09.84Z","modified":"2026-06-17T07:29:44.27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:10:10.545705Z"}],"osv":[{"id":"CVE-2024-32498","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2026-10-28T02:31:05.360623817Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:40.391953Z"},{"id":"DEBIAN-CVE-2024-32498","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T02:15:09.84Z","modified":"2026-11-02T12:02:24.007678249Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"GHSA-r4v4-w9pv-6fph","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-05T03:30:42Z","modified":"2026-07-13T16:43:17.725861996Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-200","CWE-552"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"PYSEC-2026-1708","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2026-07-07T14:34:36.285308Z","modified":"2026-07-13T16:43:17.725861996Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"PYSEC-2026-2414","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2026-07-13T14:36:32.272616Z","modified":"2026-07-13T16:43:17.725861996Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"PYSEC-2026-2493","title":"OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2026-07-13T14:36:32.3204Z","modified":"2026-07-13T16:43:17.725861996Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"RHSA-2024:4272","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.3 security update","status":"published","published":"2024-09-27T16:37:33Z","modified":"2026-03-21T10:31:56.930912Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4273","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.6 security update","status":"published","published":"2024-09-27T16:37:23Z","modified":"2026-03-21T10:31:56.023881Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4274","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.3 (openstack-nova) security update","status":"published","published":"2024-09-27T16:37:41Z","modified":"2026-03-21T10:31:56.936496Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4425","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 security update","status":"published","published":"2024-09-27T16:37:50Z","modified":"2026-03-21T10:31:58.065295Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2024-32498","description":"An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.","status":"published","published":"2024-07-02T15:00:00Z","modified":"2026-05-20T16:17:18.634222785Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"DLA-3871-1","title":"cinder - security update","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-03-09T01:21:48.288325Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-3872-1","title":"glance - security update","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-03-09T01:19:32.256144Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-3873-1","title":"nova - security update","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-03-09T01:22:10.806343Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5754-1","title":"cinder - security update","status":"published","published":"2024-08-21T00:00:00Z","modified":"2026-03-09T02:09:35.389614Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"DSA-5755-1","title":"glance - security update","status":"published","published":"2024-08-21T00:00:00Z","modified":"2026-03-09T02:10:55.820705Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"DSA-5756-1","title":"nova - security update","status":"published","published":"2024-08-21T00:00:00Z","modified":"2026-03-09T02:11:04.775546Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"USN-6882-1","title":"cinder vulnerability","description":"Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image\nprocessing. An authenticated user could use this issue to access arbitrary\nfiles on the server, possibly exposing sensitive information.\n","status":"published","published":"2024-07-08T11:49:10Z","modified":"2026-04-27T17:18:58.286888Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6882-2","title":"cinder regression","description":"USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression\nin certain environments due to incorrect privilege handling. This update\nfixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image\n processing. An authenticated user could use this issue to access arbitrary\n files on the server, possibly exposing sensitive information.\n","status":"published","published":"2024-11-07T12:27:10Z","modified":"2026-04-27T17:20:00.767567Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6883-1","title":"glance vulnerability","description":"Martin Kaesberger discovered that Glance incorrectly handled QCOW2 image\nprocessing. An authenticated user could use this issue to access arbitrary\nfiles on the server, possibly exposing sensitive information.\n","status":"published","published":"2024-07-08T11:55:01Z","modified":"2026-04-27T17:19:45.124702Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6884-1","title":"nova vulnerability","description":"Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image\nprocessing. An authenticated user could use this issue to access arbitrary\nfiles on the server, possibly exposing sensitive information.\n","status":"published","published":"2024-07-08T11:59:21Z","modified":"2026-04-27T17:19:06.214513Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-8199-1","title":"glance vulnerabilities","description":"Martin Kaesberger discovered that OpenStack Glance's image processing could\nreturn the contents of arbitrary files. An attacker could possibly use this\nissue to exfiltrate sensitive data. This issue only affected Ubuntu 16.04\nLTS and Ubuntu 18.04 LTS. (CVE-2024-32498)\n\nHyeongeun Ji and Abhishek Kekane discovered several server-side request\nforgery vulnerabilities in OpenStack Glance's image import. An attacker\ncould possibly use this issue to bypass URL validation checks and redirect\nto internal services. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2026-34881)","status":"published","published":"2026-04-22T18:04:46Z","modified":"2026-06-30T18:15:40.941167153Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}