Vulnerabilidades de OpenStack Nova (CVE)

Registros CVE publicados para OpenStack Nova, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

5.4Media

CVE-2026-46448 hace 4 meses

OpenStack Nova

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

8.2Alta

CVE-2026-24708 hace 8 meses

OpenStack Nova; Red Hat Red Hat OpenStack Platform 16.2; Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9; Red Hat Red Hat OpenStack Services on OpenShift 18.0

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img withou…