CVE-2024-44082
CVE-2024-44082
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.
CVSS 4.3 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ironic Debian:12
- Versions
- 1:21.1.0-3
- 1:21.1.0-3+deb12u1
- 1:21.3.0-1
- 1:21.4.0-1
- 1:21.4.0-2
- 1:21.4.0-3
- 1:21.4.0-4
- Affected ranges
- ECOSYSTEM: < 1:21.4.4-0+deb12u1
Update to 1:21.4.4-0+deb12u1
ironic Debian:13
- Affected ranges
- ECOSYSTEM: < 1:26.1.0-1
Update to 1:26.1.0-1
ironic Debian:14
- Affected ranges
- ECOSYSTEM: < 1:26.1.0-1
Update to 1:26.1.0-1
ironic-python-agent Debian:13
- Affected ranges
- ECOSYSTEM: < 9.14.0-1
Update to 9.14.0-1
ironic-python-agent Debian:14
- Affected ranges
- ECOSYSTEM: < 9.14.0-1
Update to 9.14.0-1
ironic Ubuntu:16.04:LTS
- Versions
- 1:4.2.0-0ubuntu1
- 1:4.3.0-0ubuntu1
- 1:5.1.0-0ubuntu1
- 1:5.1.2-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:18.04:LTS
- Versions
- 1:9.1.0-0ubuntu2
- 1:9.2.0-0ubuntu1
- 1:10.0.0-0ubuntu1
- 1:10.1.0-0ubuntu1
- 1:10.1.1-0ubuntu1
- 1:10.1.1-0ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:20.04:LTS
- Versions
- 1:13.0.1-0ubuntu1
- 1:14.0.0~b1~git2019121713.76597ca93-0ubuntu1
- 1:14.0.0~b1~git2019121713.76597ca93-0ubuntu2
- 1:14.0.0-0ubuntu1
- 1:14.0.1~git2020032415.de2d907fc-0ubuntu1
- 1:14.0.1~git2020041013.af9e6ba90-0ubuntu2
- 1:15.0.0-0ubuntu0.20.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:22.04:LTS
- Versions
- 1:18.2.0-0ubuntu1
- 1:18.2.0+git2021120910.cdc3b9538-0ubuntu1
- 1:19.0.0+git2022011216.7beadee46-0ubuntu1
- 1:20.0.0+git2022030313.4e6a3d52e-0ubuntu1
- 1:20.1.0-0ubuntu1
- 1:20.1.0-0ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1:20.1.0-0ubuntu1.2
Update to 1:20.1.0-0ubuntu1.2
ironic Ubuntu:24.04:LTS
- Versions
- 1:23.0.0-0ubuntu3
- 1:23.1.0+git2024011916.a374a0c1-0ubuntu1
- 1:24.1.0-0ubuntu1
- 1:24.1.1-0ubuntu1
- Affected ranges
- ECOSYSTEM: < 1:24.1.1-0ubuntu1.2
Update to 1:24.1.1-0ubuntu1.2
ironic-python-agent Ubuntu:24.04:LTS
- Versions
- 9.1.0-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:25.10
- Versions
- 1:29.0.0-0ubuntu1
- 1:30.0.0+git2025070713.577833d78-0ubuntu1
- 1:30.0.0+git2025070713.577833d78-0ubuntu2
- 1:32.0.0-0ubuntu1
- 1:32.0.0-0ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic-python-agent Ubuntu:25.10
- Versions
- 9.14.0-5
- 10.2.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:26.10
- Versions
- 1:35.0.0-0ubuntu2
- 1:35.0.0-0ubuntu3
- 1:38.0.0+git20260818.101.f8e78b0-0ubuntu1
- 1:38.0.0+git2026091517.26c022f13-0ubuntu1
- 1:39.0.0-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic-python-agent Ubuntu:26.10
- Versions
- 11.2.0-2
- 11.5.0-2
- 11.5.0-3
- 11.5.0-4
- 11.5.0-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic Ubuntu:26.04:LTS
- Versions
- 1:32.0.0-0ubuntu1
- 1:34.0.0-0ubuntu1
- 1:35.0.0-0ubuntu1
- 1:35.0.0-0ubuntu2
- 1:35.0.0-0ubuntu2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ironic-python-agent Ubuntu:26.04:LTS
- Versions
- 10.2.0-3
- 11.2.0-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published