Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m4f3-qp2w-gwh6

Опубликовано: 18 фев. 2026
Источник: github
Github: Прошло ревью
CVSS3: 8.2

Описание

OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Пакеты

Наименование

Nova

pip
Затронутые версииВерсия исправления

>= 32.0.0.0rc1, <= 32.1.0

Отсутствует

Наименование

Nova

pip
Затронутые версииВерсия исправления

>= 31.0.0.0rc1, <= 31.2.0

Отсутствует

Наименование

Nova

pip
Затронутые версииВерсия исправления

<= 30.2.1

Отсутствует

EPSS

Процентиль: 22%
0.00072
Низкий

8.2 High

CVSS3

Дефекты

CWE-669

Связанные уязвимости

CVSS3: 8.2
ubuntu
около 1 месяца назад

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

CVSS3: 7.1
redhat
около 1 месяца назад

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

CVSS3: 8.2
nvd
около 1 месяца назад

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

CVSS3: 8.2
debian
около 1 месяца назад

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31. ...

EPSS

Процентиль: 22%
0.00072
Низкий

8.2 High

CVSS3

Дефекты

CWE-669