CVE-2024-40767

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40767.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "27.4.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "28.0.0"
            },
            {
                "fixed": "28.2.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "29.0.0"
            },
            {
                "fixed": "29.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "27.4.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "28"
            },
            {
                "fixed": "28.2.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "29"
            },
            {
                "fixed": "29.1.1"
            }
        ]
    }
]