Описание
OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ironic | fixed | 1:35.0.1-5 | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/06/03/11
https://bugs.launchpad.net/ironic/+bug/2150624
Errata/Followup: https://www.openwall.com/lists/oss-security/2026/06/15/9
Связанные уязвимости
CVSS3: 5.8
ubuntu
2 месяца назад
OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.
CVSS3: 5.8
nvd
2 месяца назад
OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.
