Threats Tagged 'cve-2024-40767'
View all threats tagged with 'cve-2024-40767'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2024-40767'
Click on any threat for detailed analysis and mitigation recommendations
0 A security vulnerability identified as CVE-2024-40767 affects Red Hat OpenStack Platform 16.1.9 (openstack-nova). This issue is a regression involving arbitrary file access related to VMDK/qcow disk image handling. Red Hat has issued a security update to address this vulnerability. The update is rated as important by Red Hat Product Security. No CVSS score is provided for this vulnerability. Join the discussion | GCVE Database | 08/08/2024, 07:27:06 UTC Added: 08/08/2026, 14:54:39 UTC |
0 In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Join the discussion | CVE Database V5 | 07/24/2024, 00:00:00 UTC Added: 11/04/2025, 16:46:38 UTC |
Showing 1 to 2 of 2 results