CVE-2026-24708
Estado: AplazadaAlta (8.2)—
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
- Puntuación base: 8.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.38%
- Percentil entre todas las CVEs puntuadas: 30
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1210Exploitation of Remote Serviceslateral movement85 % - Impacto principal
T1565.001Stored Data Manipulationimpact80 % - Impacto secundario
T1499.004Application or System Exploitationimpact75 %
Acceso local con privilegios (PR:L) en OpenStack; escribe header QCOW malicioso y desencadena resize sin restricción de formato, destruyendo datos en el host. Manipulación de datos + DoS.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (2)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-669
- CWE-73
Referencias
- https://bugs.launchpad.net/nova/+bug/2137507
- https://www.openwall.com/lists/oss-security/2026/02/17/7
- https://lists.debian.org/debian-lts-announce/2026/02/msg00025.html
- https://access.redhat.com/errata/RHSA-2026:54757
- https://access.redhat.com/errata/RHSA-2026:66401
- https://access.redhat.com/errata/RHSA-2026:7884
- https://access.redhat.com/security/cve/CVE-2026-24708
- https://bugzilla.redhat.com/show_bug.cgi?id=2430312
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24708.json
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-24708",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-24708",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-02-19T19:07:53.345297Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cve@mitre.org",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 5.8,
"exploitabilityScore": 1.8
},
{
"type": "Secondary",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.1,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 5.2,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "OpenStack",
"product": "Nova",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "30.2.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "31.0.0",
"lessThan": "31.2.1",
"versionType": "semver"
},
{
"status": "affected",
"version": "32.0.0",
"lessThan": "32.1.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"affectedData": [
{
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 16.2",
"versions": [
{
"status": "unaffected",
"version": "1:20.6.2-2.20260317135026.8a24acd.el8ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-nova",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.2.0-1.4.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ansible-collection-ansible-posix",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.9.1-17.1.20260318160829.0e9a6f2.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ansible-collections-openstack",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:0.2.1-6.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "collectd-sensubility",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:24.3.4.2-7.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "erlang",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:3.4.26-9.6.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "etcd",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "octavia-amphora-image-fips-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "octavia-amphora-image-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:18.2.2-17.1.20260702111621.f6b44fc.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-cinder",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:16.1.1-17.1.20260713101101.edc6d60.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-heat",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:17.1.1-17.1.20260721220909.c31db88.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-ironic",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:7.1.1-17.1.20260803104219.0211fa9.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-ironic-python-agent",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:19.0.2-17.1.20260630150819.54dd95d.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-keystone",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:18.6.1-17.1.20260810120959.85ff760.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-neutron",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:23.2.3-17.1.20260810140853.2ace99d.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-nova",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:0.8.37-17.1.20260107141051.05dd1b2.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-selinux",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:2.27.1-17.1.20260806131309.16dbcae.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-swift",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:14.3.1-17.1.20260803105013.e7c7ce3.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-tripleo-heat-templates",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:14.2.1-17.1.20260803103231.61d7bd7.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "os-net-config",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:11.0.1-17.1.20260306080955.63fee2c.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "puppet-rabbitmq",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:14.2.3-17.1.20260206090839.40278e1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "puppet-tripleo",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.8.0-17.1.20260114160833.0e94611.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-cinder-tests-tempest",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1:19.4.1-17.1.20260630130603.9b1a13e.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-django-horizon",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:2.5.1-17.1.20260225150839.5f1cee6.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-glance-store",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:4.3.4-17.1.20260324150947.cf69f92.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-os-brick",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-oslo-messaging",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-oslo-serialization",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.9.4-17.1.20260304101059.65d02f0.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "python-ovsdbapp",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-fips-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-ipa-fips-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-ipa-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-minimal",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-minimal-fips",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-multirhel-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-uefi-fips-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-uefi-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:17.1-20260901.1.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosp-director-images-x86_64",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:3.3.1-17.1.20260603190918.8debef3.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "tripleo-ansible",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"versions": [
{
"status": "unaffected",
"version": "1:27.5.2-18.0.20260312122217.c1c6d67.el9ost",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openstack-nova",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:13"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 13 (Queens)",
"packageName": "rhosp13/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 16.2",
"packageName": "rhosp12/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 16.2",
"packageName": "rhosp-rhel8/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 16.2",
"packageName": "rhosp-rhel9/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1",
"packageName": "rhosp12/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1",
"packageName": "rhosp-rhel8/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 17.1",
"packageName": "rhosp-rhel9/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 18.0",
"packageName": "rhoso/openstack-nova-compute-rhel9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 18.0",
"packageName": "rhosp12/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 18.0",
"packageName": "rhosp-rhel9/openstack-nova-compute",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
}
]
}
],
"published": "2026-02-18T18:24:33.087",
"references": [
{
"url": "https://bugs.launchpad.net/nova/+bug/2137507",
"source": "cve@mitre.org"
},
{
"url": "https://www.openwall.com/lists/oss-security/2026/02/17/7",
"source": "cve@mitre.org"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00025.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:54757",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:66401",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:7884",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-24708",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24708.json",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "cve@mitre.org",
"description": [
{
"lang": "en",
"value": "CWE-669"
}
]
},
{
"type": "Secondary",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"description": [
{
"lang": "en",
"value": "CWE-73"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected."
},
{
"lang": "es",
"value": "Se descubrió un problema en OpenStack Nova antes de la versión 30.2.2, 31 antes de la 31.2.1, y 32 antes de la 32.1.1. Al escribir una cabecera QCOW maliciosa en un disco raíz o efímero y luego activar un redimensionamiento, un usuario puede inducir al backend de imagen Flat de Nova a llamar a qemu-img sin una restricción de formato, lo que resulta en una operación de redimensionamiento de imagen insegura que podría destruir datos en el sistema anfitrión. Solo los nodos de cómputo que utilizan el backend de imagen Flat (normalmente configurados con use_cow_images=False) se ven afectados."
}
],
"lastModified": "2026-09-11T13:17:13.113",
"sourceIdentifier": "cve@mitre.org"
}