CVE-2024-32498
Fixed in a distro release EPSS <1%CVSS 6.5
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.
Products: openstack cinder, openstack glance, openstack nova
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cinder | no fix |
| PyPI | glance | no fix |
| PyPI | nova | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | cinder | 2:17.4.0-1~deb11u2 |
| Debian 11 | glance | 2:21.1.0-1+deb11u2 |
| Debian 11 | nova | 2:22.4.0-1~deb11u5 |
| Debian 12 | cinder | 2:21.3.1-1~deb12u1 |
| Debian 12 | glance | 2:25.1.0-2+deb12u1 |
| Debian 12 | nova | 2:26.2.2-1~deb12u3 |
| Debian 13 | cinder | 2:24.0.0-5 |
| Debian 13 | glance | 2:28.0.1-3+deb12u1 |
| Debian 13 | nova | 2:29.0.2-4 |
| Debian 14 | cinder | 2:24.0.0-5 |
| Debian 14 | nova | 2:29.0.2-4 |
| Red Hat openstack 16.1 | openstack-cinder | 1:15.4.0-1.20230510003503.el8ost |
| Red Hat openstack 16.1 | openstack-glance | 1:19.0.4-1.20230310213451.el8ost |
| Red Hat openstack 16.1 | openstack-nova | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-api | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-common | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-compute | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-conductor | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-console | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-migration | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-novncproxy | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-scheduler | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-serialproxy | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | openstack-nova-spicehtml5proxy | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.1 | python3-cinder | 1:15.4.0-1.20230510003503.el8ost |
| Red Hat openstack 16.1 | python3-glance | 1:19.0.4-1.20230310213451.el8ost |
| Red Hat openstack 16.1 | python3-nova | 1:20.4.1-1.20221005193234.el8ost |
| Red Hat openstack 16.2 | openstack-cinder | 1:15.6.1-2.20230906144858.el8ost |
| Red Hat openstack 16.2 | openstack-glance | 1:19.0.5-2.20230310205021.el8ost |
| Red Hat openstack 16.2 | openstack-nova | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-api | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-common | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-compute | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-conductor | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-console | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-migration | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-novncproxy | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-scheduler | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-serialproxy | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | openstack-nova-spicehtml5proxy | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 16.2 | python3-cinder | 1:15.6.1-2.20230906144858.el8ost |
| Red Hat openstack 16.2 | python3-glance | 1:19.0.5-2.20230310205021.el8ost |
| Red Hat openstack 16.2 | python3-nova | 1:20.6.2-2.20230814165228.el8ost |
| Red Hat openstack 17.1 | openstack-cinder | 1:18.2.2-17.1.20231011140829.el9ost |
| Red Hat openstack 17.1 | openstack-glance | 1:22.1.2-17.1.20230621071326.el9ost |
| Red Hat openstack 17.1 | openstack-nova | 1:23.2.3-17.1.20231018123754.el8ost |
| Red Hat openstack 17.1 | openstack-nova | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-api | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-common | 1:23.2.3-17.1.20231018123754.el8ost |
| Red Hat openstack 17.1 | openstack-nova-common | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-compute | 1:23.2.3-17.1.20231018123754.el8ost |
| Red Hat openstack 17.1 | openstack-nova-compute | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-conductor | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-migration | 1:23.2.3-17.1.20231018123754.el8ost |
| Red Hat openstack 17.1 | openstack-nova-migration | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-novncproxy | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-scheduler | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-serialproxy | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | openstack-nova-spicehtml5proxy | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | python3-cinder | 1:18.2.2-17.1.20231011140829.el9ost |
| Red Hat openstack 17.1 | python3-cinder-common | 1:18.2.2-17.1.20231011140829.el9ost |
| Red Hat openstack 17.1 | python3-glance | 1:22.1.2-17.1.20230621071326.el9ost |
| Red Hat openstack 17.1 | python3-nova | 1:23.2.3-17.1.20231018130828.el9ost |
| Red Hat openstack 17.1 | python3-nova | 1:23.2.3-17.1.20231018123754.el8ost |
| Ubuntu 16.04 LTS | cinder | no fix |
| Ubuntu 20.04 LTS | cinder | 2:16.4.2-0ubuntu2.8 |
| Ubuntu 20.04 LTS | cinder | 2:16.4.2-0ubuntu2.9 |
| Ubuntu 20.04 LTS | glance | 2:20.2.0-0ubuntu1.2 |
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.8 |
| Ubuntu 22.04 LTS | cinder | 2:20.3.1-0ubuntu1.5 |
| Ubuntu 22.04 LTS | cinder | 2:20.3.1-0ubuntu1.4 |
| Ubuntu 22.04 LTS | glance | 2:24.2.1-0ubuntu1.2 |
| Ubuntu 22.04 LTS | nova | 3:25.2.1-0ubuntu2.3 |
| Ubuntu 24.04 LTS | cinder | 2:24.0.0-0ubuntu1.2 |
| Ubuntu 24.04 LTS | cinder | 2:24.0.0-0ubuntu1.3 |
| Ubuntu 24.04 LTS | glance | 2:28.0.1-0ubuntu1.2 |
| Ubuntu 24.04 LTS | nova | 3:29.0.1-0ubuntu1.3 |
| Ubuntu Pro 16.04 LTS | glance | 2:12.0.0-0ubuntu2+esm1 |
| Ubuntu Pro 16.04 LTS | nova | no fix |
| Ubuntu Pro 18.04 LTS | cinder | no fix |
| Ubuntu Pro 18.04 LTS | glance | 2:16.0.1-0ubuntu1.1+esm2 |
| Ubuntu Pro 18.04 LTS | nova | no fix |
| Ubuntu Pro 20.04 LTS | glance | 2:20.2.0-0ubuntu1.2+esm2 |