GitHub Advisoryadvisory · PyPI

GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data

MEDIUM Published 2024-07-24 Modified 2025-11-04 Official page ↗
Aliases
CVE-2024-40767
Ecosystem
PyPI
Packages
Nova
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-436, CWE-552
Reviewed
2024-07-25

Affected packages

• PyPI Nova: <= 27.4.0 (no fix yet) • PyPI Nova: >= 28.0.0, <= 28.2.0 (no fix yet) • PyPI Nova: >= 29.0.0, <= 29.1.0 (no fix yet)

Description

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498.

Related

Alias · CVE (1)

  • CVE-2024-40767 In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2… vulnerability

Weakness · CWE (2)

  • CWE-436 Interpretation Conflict weakness
  • CWE-552 Files or Directories Accessible to External Parties weakness

References