Skip to content
OpenAdvisories
Medium DLA-3871-1 2 CVEs

cinder - security update

Published Sep 5, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 cinder 2:17.4.0-1~deb11u2

Vulnerabilities 2

  • Medium 6.5
    CVE-2023-2088

    A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionall…

    nova nova ironic cinder Debian Ubuntu
  • Medium 6.5
    CVE-2024-32498

    OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

    An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenti…

    nova nova glance nova Debian Ubuntu PyPI