CVE-2024-47211

Summary

CVE-2024-47211 is a vulnerability affecting OpenStack Ironic versions before 21.4.4, 22.x, 23.0.2, 23.x and 24.1.2, and 25.x and 26.x before 26.1.0. This issue arises due to a missing checksum validation for supplied image_source URLs during the process of converting images to a raw format for streaming. An attacker can exploit this vulnerability by supplying malicious image files with incorrect checksums, which could lead to the execution of unauthorized code or data corruption. Consequently, it's crucial for OpenStack Ironic users to update their systems to the latest patched versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.