Read the docs
TI-2024-29664 Aliases CVE-2024-44082

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a…

Priority LOW 21CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Partial Red Hat: 7 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-862.

Summary

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: <21.4.3, >=22.0.0 <23.0.2, >=23.1.0 <24.1.2, >=25.0.0 <26.0.1; Ironic-python-agent: <9.4.2, >=9.5.0 <9.7.1, >=9.8.0 <9.11.1, >=9.12.0 <9.13.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00545 45th percentileScored 2026-11-07
Fix Partial Red Hat: 7 advisoriesRed Hat: 7 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

Remediation

Red Hat 7 advisories

  • RHSA-2025:0204 Released 2025-01-09 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 (openstack-ironic) security update
    • Red Hat OpenStack Platform 16.2 openstack-ironic-1:13.0.8-2.20230713045150.d10fd5c.el8ost, openstack-ironic-api-1:13.0.8-2.20230713045150.d10fd5c.el8ost, openstack-ironic-common-1:13.0.8-2.20230713045150.d10fd5c.el8ost +1
  • RHSA-2024:9982 Released 2024-11-21 · Red Hat rating Important
    RHOSP 17.1.4 (openstack-ironic) security update
    • Red Hat OpenStack Platform 17.1 openstack-ironic-1:17.1.1-17.1.20240917210749.c31db88.el9ost, openstack-ironic-api-1:17.1.1-17.1.20240917210749.c31db88.el9ost, openstack-ironic-common-1:17.1.1-17.1.20240917210749.c31db88.el9ost +1
  • RHSA-2024:8694 Released 2024-11-07 · Red Hat rating Important
    OpenShift Container Platform 4.12.68 security update
    • Ironic content for Red Hat OpenShift Container Platform 4.12 openstack-ironic-1:21.0.1-0.20240913135525.114badc.el9, openstack-ironic-api-1:21.0.1-0.20240913135525.114badc.el9, openstack-ironic-common-1:21.0.1-0.20240913135525.114badc.el9 +3
    • Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-4.rhaos4.12.el8, cri-o-1.25.5-30.rhaos4.12.git53dc492.el8, cri-o-1.25.5-5.rhaos4.12.git53dc492.el9 +18
Show 4 more Red Hat advisories
  • RHSA-2024:8235 Released 2024-10-23 · Red Hat rating Important
    OpenShift Container Platform 4.14.39 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-cluster-baremetal-operator-rhel8, openshift4/ose-ibm-cloud-controller-manager-rhel8 +5
  • RHSA-2024:7941 Released 2024-10-16 · Red Hat rating Important
    OpenShift Container Platform 4.13.z security update
    • Ironic content for Red Hat OpenShift Container Platform 4.13 openstack-ironic-1:21.3.1-0.20240911165036.c0d61d0.el9, openstack-ironic-api-1:21.3.1-0.20240911165036.c0d61d0.el9, openstack-ironic-common-1:21.3.1-0.20240911165036.c0d61d0.el9 +5
    • Red Hat OpenShift Container Platform 4.13 podman-3:4.4.1-13.rhaos4.13.el8, podman-3:4.4.1-14.rhaos4.13.el9, podman-catatonit-3:4.4.1-13.rhaos4.13.el8 +14
  • RHSA-2024:7594 Released 2024-10-09 · Red Hat rating Important
    OpenShift Container Platform 4.15.36 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ironic-rhel9, rhcos
  • RHSA-2024:7174 Released 2024-10-02 · Red Hat rating Important
    OpenShift Container Platform 4.16.15 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 16.1AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Ironic content for Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:8694
Ironic content for Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:7941
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:8235
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:7594
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:7174
Red Hat OpenStack Platform 16.2Fixed RHSA-2025:0204
Red Hat OpenStack Platform 17.1Fixed RHSA-2024:9982
Not affected: 7 products
  • Ironic content for Red Hat OpenShift Container Platform 4.12
  • Ironic content for Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-44082

References

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences