USN-6883-1: OpenStack Glance vulnerability
Published Jul 8, 2024
·Updated
Martin Kaesberger discovered that Glance incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/glance-common<2:28.0.1-0ubuntu1.2
2:28.0.1-0ubuntu1.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/glance-common<2:27.0.0-0ubuntu1.2
2:27.0.0-0ubuntu1.2
Ubuntu Ubuntu=23.10
All of the following
ubuntu/glance-common<2:24.2.1-0ubuntu1.2
2:24.2.1-0ubuntu1.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/glance-common<2:20.2.0-0ubuntu1.2
2:20.2.0-0ubuntu1.2
Ubuntu Ubuntu=20.04
Event History
Jul 8, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6883-1?
The severity of USN-6883-1 is classified as important due to potential exposure of sensitive information.
2
How do I fix USN-6883-1?
To fix USN-6883-1, you should upgrade the 'glance-common' package to the latest version available for your Ubuntu release.
3
Which Ubuntu versions are affected by USN-6883-1?
USN-6883-1 affects multiple Ubuntu versions, including 20.04, 22.04, 23.10, and 24.04.
4
What vulnerability does USN-6883-1 address?
USN-6883-1 addresses a vulnerability in Glance that allows authenticated users to access arbitrary files on the server.
5
Who discovered the vulnerability reported in USN-6883-1?
The vulnerability reported in USN-6883-1 was discovered by Martin Kaesberger.