Moderate severityNVD Advisory· Published Jul 24, 2024· Updated Nov 4, 2025
CVE-2024-40767
CVE-2024-40767
Description
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
NovaPyPI | <= 27.4.0 | — |
NovaPyPI | >= 28.0.0, <= 28.2.0 | — |
NovaPyPI | >= 29.0.0, <= 29.1.0 | — |
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/advisories/GHSA-rm86-h44c-2r2mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-40767ghsaADVISORY
- launchpad.net/bugs/2071734ghsaWEB
- lists.debian.org/debian-lts-announce/2024/09/msg00017.htmlghsaWEB
- review.opendev.org/c/openstack/nova/+/924731ghsaWEB
- security.openstack.orgghsaWEB
- security.openstack.org/ossa/OSSA-2024-002.htmlghsaWEB
- www.openwall.com/lists/oss-security/2024/07/23/2ghsaWEB
News mentions
0No linked articles in our index yet.