Openstack Glance vulnerabilities

• openstack glance In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when... CVE-2026-71198 Fix available 7.0 HighSeptember 14, 2026
• openstack glance In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass... CVE-2026-77648 Fix available 2.2 LowAugust 20, 2026
• glanceapp glance Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass CVE-2026-63770 8.2 HighJuly 20, 2026
• openstack glance, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 more OpenStack Glance is affected by Server-Side Request Forgery (SSRF) CVE-2026-34881 Fix available 5.0 MediumMarch 31, 2026
• openstack cinder, glance, nova +2 more OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access CVE-2024-32498 Fix available 6.5 MediumJuly 2, 2024
• openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 more Glance-store: glance store access key logged in debug log level CVE-2024-1141 Fix available 5.5 MediumFebruary 1, 2024
• openstack glance, redhat openstack +1 more OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability CVE-2022-4134 2.8 LowMarch 6, 2023
• glance project glance Path traversal vulnerability in glance CVE-2022-25937 Fix available 6.5 MediumFebruary 13, 2023
• openstack cinder, glance, nova +1 more +3 more OpenStack Cinder, glance, and Nova vulnerable to Path Traversal CVE-2022-47951 Fix available 5.7 MediumJanuary 26, 2023
• openstack glance, the openstack foundation openstack-glance +1 more A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image... CVE-2016-8611 Fix available 4.3 MediumJuly 31, 2018
• openstack glance OpenStack Glance Signature Verification Bypass CVE-2015-8234 5.5 MediumMarch 29, 2017
• openstack glance OpenStack Glance Server-Side Request Forgery (SSRF) CVE-2017-7200 Fix available 5.8 MediumMarch 21, 2017
• openstack cinder, glance, nova +2 more OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption CVE-2015-5162 Fix available 7.5 HighOctober 7, 2016
• openstack image registry and delivery service \(glance\) OpenStack Image Service (Glance) vulnerable to Improper Access Control CVE-2016-0757 Fix available 4.3 MediumApril 13, 2016
• openstack image registry and delivery service \(glance\) OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service CVE-2015-5286 Fix available 6.8 MediumOctober 26, 2015
• openstack image registry and delivery service \(glance\) OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions CVE-2015-5251 Fix available 5.5 MediumSeptember 22, 2015
• openstack glance OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file CVE-2015-5163 Fix available 3.5 LowAugust 19, 2015
• openstack glance OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of... CVE-2015-3289 Fix available 4.0 MediumAugust 14, 2015
• openstack image registry and delivery service \(glance\) OpenStack Glance Denial of service by creating a large number of images CVE-2015-1881 Fix available 4.0 MediumFebruary 24, 2015
• openstack image registry and delivery service \(glance\) OpenStack Glance Denial of service by creating a large number of images CVE-2014-9684 Fix available 4.0 MediumFebruary 24, 2015
• redhat openstack, openstack image registry and delivery service \(glance\) +1 more OpenStack Glance Bypass the storage quota and Denial of service CVE-2014-9623 Fix available 4.0 MediumJanuary 23, 2015
• openstack image registry and delivery service \(glance\) OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme CVE-2015-1195 Fix available 6.5 MediumJanuary 21, 2015
• redhat openstack, openstack image registry and delivery service \(glance\) +1 more The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4... CVE-2014-9493 Fix available 5.5 MediumJanuary 7, 2015
• canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 more OpenStack Glance improper validation of the image_size_cap configuration option CVE-2014-5356 Fix available 4.0 MediumAugust 20, 2014
• openstack icehouse, image registry and delivery service \(glance\) +1 more OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability CVE-2014-0162 Fix available 6.0 MediumApril 27, 2014
• openstack image registry and delivery service \(glance\) OpenStack Glance sensitive information disclosure via logs CVE-2014-1948 Fix available 2.6 LowFebruary 14, 2014
• openstack image registry and delivery service \(glance\) The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for... CVE-2013-4354 2.1 LowNovember 23, 2013
• openstack glance, canonical ubuntu linux +1 more OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and... CVE-2013-4428 Fix available 3.5 LowOctober 27, 2013
• openstack python glanceclient, opensuse +1 more python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate CVE-2013-4111 Fix available 5.8 MediumAugust 28, 2013
• openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 more Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request CVE-2013-1840 Fix available 6.5 MediumMarch 22, 2013
• canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 more OpenStack Glance logs user name and password in cleartext CVE-2013-0212 Public exploitFix available 4.0 MediumFebruary 24, 2013
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-5482 Fix available 5.5 MediumNovember 11, 2012
• openstack essex, folsom, image registry and delivery service \(glance\) +2 more OpenStack Glance arbitrary deletion of non-protected images CVE-2012-4573 Fix available 5.5 MediumNovember 11, 2012