CVE-2024-44082

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 26.0.1 Ironic-python-agent versions prior to 9.13.1

Description The issue concerns a vulnerability in image processing, where a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, potentially leading to unauthorized access to sensitive data.

Recommendations For OpenStack Ironic versions prior to 26.0.1, update to version 26.0.1 or later to resolve the issue. For Ironic-python-agent versions prior to 9.13.1, update to version 9.13.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted images in the image processing functionality until a patch is applied.