CVE-2024-32498

2024-07-0502:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-32498

ossa-2024-001

arbitrary file access

qcow2

unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

18.3%

JSON

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file’s contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

OSVersionArchitecturePackageVersionFilename
Debian12allcinder< 2:21.3.1-1~deb12u1cinder_2:21.3.1-1~deb12u1_all.deb
Debian11allcinder< 2:17.4.0-1~deb11u2cinder_2:17.4.0-1~deb11u2_all.deb
Debian999allcinder< 2:24.0.0-5cinder_2:24.0.0-5_all.deb
Debian12allglance< 2:25.1.0-2+deb12u1glance_2:25.1.0-2+deb12u1_all.deb
Debian11allglance< 2:21.1.0-1+deb11u2glance_2:21.1.0-1+deb11u2_all.deb
Debian999allglance< 2:28.0.1-3+deb12u1glance_2:28.0.1-3+deb12u1_all.deb
Debian13allglance< 2:28.0.1-3+deb12u1glance_2:28.0.1-3+deb12u1_all.deb
Debian12allnova< 2:26.2.2-1~deb12u3nova_2:26.2.2-1~deb12u3_all.deb
Debian11allnova< 2:22.4.0-1~deb11u5nova_2:22.4.0-1~deb11u5_all.deb
Debian999allnova< 2:29.0.2-4nova_2:29.0.2-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cinder	< 2:21.3.1-1~deb12u1	cinder_2:21.3.1-1~deb12u1_all.deb
Debian	11	all	cinder	< 2:17.4.0-1~deb11u2	cinder_2:17.4.0-1~deb11u2_all.deb
Debian	999	all	cinder	< 2:24.0.0-5	cinder_2:24.0.0-5_all.deb
Debian	12	all	glance	< 2:25.1.0-2+deb12u1	glance_2:25.1.0-2+deb12u1_all.deb
Debian	11	all	glance	< 2:21.1.0-1+deb11u2	glance_2:21.1.0-1+deb11u2_all.deb
Debian	999	all	glance	< 2:28.0.1-3+deb12u1	glance_2:28.0.1-3+deb12u1_all.deb
Debian	13	all	glance	< 2:28.0.1-3+deb12u1	glance_2:28.0.1-3+deb12u1_all.deb
Debian	12	all	nova	< 2:26.2.2-1~deb12u3	nova_2:26.2.2-1~deb12u3_all.deb
Debian	11	all	nova	< 2:22.4.0-1~deb11u5	nova_2:22.4.0-1~deb11u5_all.deb
Debian	999	all	nova	< 2:29.0.2-4	nova_2:29.0.2-4_all.deb