Skip to main content

CVE-2024-40767

Medium
6.5/10

Summary

In nova package versions before through 27.4.0, 28.0.0.0rc1 through 28.2.0, and 29.0.0.0rc1 through 29.1.0, by supplying a raw format image that is actually a crafted "QCOW2" image with a backing file path or "VMDK" flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

References

Advisory Timeline

  • Published