| Package | Affected versions | Patched versions |
|---|---|---|
| ironic | ≥ 22.0.0, < 23.0.3≥ 23.1.0, < 24.1.3≥ 25.0.0, < 26.1.1≤ 21.4.3< 23.0.3 | 23.0.324.1.326.1.1 |
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free