5.4Medium
OpenStack Nova
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
OpenStack Nova vulnerabilities (CVE)
CVE records published for OpenStack Nova, newest first. Follow to get an email when a new one appears.
8.2High
OpenStack Nova; Red Hat Red Hat OpenStack Platform 16.2; Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9; Red Hat Red Hat OpenStack Services on OpenShift 18.0
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img withou…