Read the docs
TI-2024-21386 Aliases CVE-2024-32498GHSA-r4v4-w9pv-6fph

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and…

Priority LOW 30CWE-552Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-552.

Summary

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00835 57th percentileScored 2026-11-07
Fix Fixed Red Hat: 4 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—cinder (PyPI)up to 24.0.0—No fix listedGHSA-r4v4-w9pv-6fph
—glance (PyPI)up to 28.0.1—No fix listedGHSA-r4v4-w9pv-6fph
—nova (PyPI)up to 29.0.2—No fix listedGHSA-r4v4-w9pv-6fph
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • cinder (PyPI) Vendor— Affected up to 24.0.0 Fixed in — No fix listed GHSA-r4v4-w9pv-6fph
  • glance (PyPI) Vendor— Affected up to 28.0.1 Fixed in — No fix listed GHSA-r4v4-w9pv-6fph
  • nova (PyPI) Vendor— Affected up to 29.0.2 Fixed in — No fix listed GHSA-r4v4-w9pv-6fph

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:*before 22.1.3; 23.0.0 to before 23.1.1VulnerableOpenStack
cpe:2.3:a:openstack:cinder:24.0.0:*:*:*:*:*:*:*24.0.0VulnerableOpenStack
cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*before 26.0.1; 28.0.0 to before 28.0.2VulnerableOpenStack
cpe:2.3:a:openstack:glance:27.0.0:*:*:*:*:*:*:*27.0.0VulnerableOpenStack
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*before 27.3.1; 28.0.0 to before 28.1.1; 29.0.0 to before 29.0.3VulnerableOpenStack
  • cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:* Versions before 22.1.3; 23.0.0 to before 23.1.1 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:cinder:24.0.0:*:*:*:*:*:*:* Versions 24.0.0 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:* Versions before 26.0.1; 28.0.0 to before 28.0.2 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:glance:27.0.0:*:*:*:*:*:*:* Versions 27.0.0 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* Versions before 27.3.1; 28.0.0 to before 28.1.1; 29.0.0 to before 29.0.3 Vulnerable ·OpenStack

Remediation

Red Hat 4 advisories

  • RHSA-2024:4425 Released 2024-07-09 · Red Hat rating Critical
    Red Hat OpenStack Platform 16.1.9 security update
    • Red Hat OpenStack Platform 16.1 openstack-cinder-1:15.4.0-1.20230510003503.el8ost, openstack-glance-1:19.0.4-1.20230310213451.el8ost, openstack-nova-1:20.4.1-1.20221005193234.el8ost +13
  • RHSA-2024:4273 Released 2024-07-02 · Red Hat rating Critical
    Red Hat OpenStack Platform 16.2.6 security update
    • Red Hat OpenStack Platform 16.2 openstack-cinder-1:15.6.1-2.20230906144858.el8ost, openstack-glance-1:19.0.5-2.20230310205021.el8ost, openstack-nova-1:20.6.2-2.20230814165228.el8ost +13
  • RHSA-2024:4274 Released 2024-07-02 · Red Hat rating Critical
    Red Hat OpenStack Platform 17.1.3 (openstack-nova) security update
    • Red Hat OpenStack Platform 17.1 openstack-nova-1:23.2.3-17.1.20231018123754.el8ost, openstack-nova-common-1:23.2.3-17.1.20231018123754.el8ost, openstack-nova-compute-1:23.2.3-17.1.20231018123754.el8ost +2
Show 1 more Red Hat advisories
  • RHSA-2024:4272 Released 2024-07-02 · Red Hat rating Critical
    Red Hat OpenStack Platform 17.1.3 security update
    • Red Hat OpenStack Platform 17.1 openstack-cinder-1:18.2.2-17.1.20231011140829.el9ost, openstack-glance-1:22.1.2-17.1.20230621071326.el9ost, openstack-nova-1:23.2.3-17.1.20231018130828.el9ost +13

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 16.1Fixed RHSA-2024:4425
Red Hat OpenStack Platform 16.2Fixed RHSA-2024:4273
Red Hat OpenStack Platform 17.1Fixed RHSA-2024:4272, RHSA-2024:4274
Not affected: 3 products
  • Red Hat OpenStack Platform 10 (Newton)
  • Red Hat OpenStack Platform 13 (Queens)
  • Red Hat OpenStack Platform 18.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-32498
  2. 2026-10-03 Alias added: GHSA-r4v4-w9pv-6fph

References

Patch 2

Advisory 1

Other 12

  • TI-2022-23762 An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and… CVSS 3.1MEDIUM 5.7
  • TI-2015-04330 The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1… CVSS 3.0HIGH 7.5
  • TI-2017-11109 Information disclosure in openstack-cinder CVSS 3.1HIGH 7.5
  • TI-2013-03674 The (1) backup (api/contrib/backups.py) and (2) volume transfer… CVSS 2.0MEDIUM 4.3
  • TI-2014-02962 The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows… CVSS 2.0MEDIUM 4.0
  • TI-2014-06020 The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova… CVSS 2.0LOW 2.1
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences