[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCovw4yKUQ2D233wT0FPCS00bbbBzaQ-GXIUlvCBPl0w":3,"g5a-ex:openstack\u002Fglance@*":362,"g5a-family:openstack\u002Fglance":364},{"success":4,"data":5},true,{"product":6,"versions":189,"topVulnerabilitiesByEpss":276,"kevVulnerabilities":339,"seoMetadata":340,"meta":359},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":188},"openstack","glance",86,11,0,"2024-07-05",[14,17,19,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.7",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"11.0.0",1,{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},"11.0.1",{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.2",{"version":27,"cve_count":21,"kev_count":11,"has_kev":16},"12.0.0",{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},"13.0.0",{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.0",{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.1",{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.0",{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.2",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"16.0.0",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"16.0.1",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"17.0.0",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.0",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.0",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.1",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.2",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.3",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.4",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"20.0.0",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"20.0.0.0",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"20.0.1",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"20.1.0",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"2011.2",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"2011.3",{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},"2011.3.1",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"2012.1",{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},"2012.1.1",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"2012.1.2",{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},"2012.2",{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"2012.2.1",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"2012.2.2",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"2012.2.3",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"2012.2.4",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1.1",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1.2",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1.3",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1.4",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"2013.1.5",{"version":103,"cve_count":21,"kev_count":11,"has_kev":16},"2013.2",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"2013.2.1",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"2013.2.2",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"2013.2.3",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"2013.2.4",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.1",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.2",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.3",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.4",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.5",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.1",{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.2",{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.3",{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.4",{"version":135,"cve_count":21,"kev_count":11,"has_kev":16},"2015.1.0",{"version":137,"cve_count":21,"kev_count":11,"has_kev":16},"2015.1.1",{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.2",{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.3",{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.4",{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.0",{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.0.0",{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.0",{"version":151,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.0.0",{"version":153,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.0",{"version":155,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.0",{"version":157,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.0.0",{"version":159,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.0",{"version":161,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.0.0",{"version":163,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.0",{"version":165,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.1",{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},"24.2.0",{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},"25.0.0",{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},"25.0.0.0",{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},"25.1.0",{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},"26.0.0.0",{"version":177,"cve_count":11,"kev_count":11,"has_kev":16},"26.0.1",{"version":179,"cve_count":21,"kev_count":11,"has_kev":16},"27.0.0",{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},"28.0.0",{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},"28.0.2",{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},"mitaka",{"version":187,"cve_count":21,"kev_count":11,"has_kev":16},"v1","Glance by Openstack is a technology product with 86 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},{"version":27,"cve_count":21,"kev_count":11,"has_kev":16},{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":21,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},{"version":135,"cve_count":21,"kev_count":11,"has_kev":16},{"version":137,"cve_count":21,"kev_count":11,"has_kev":16},{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},{"version":151,"cve_count":11,"kev_count":11,"has_kev":16},{"version":153,"cve_count":11,"kev_count":11,"has_kev":16},{"version":155,"cve_count":11,"kev_count":11,"has_kev":16},{"version":157,"cve_count":11,"kev_count":11,"has_kev":16},{"version":159,"cve_count":11,"kev_count":11,"has_kev":16},{"version":161,"cve_count":11,"kev_count":11,"has_kev":16},{"version":163,"cve_count":11,"kev_count":11,"has_kev":16},{"version":165,"cve_count":11,"kev_count":11,"has_kev":16},{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},{"version":177,"cve_count":11,"kev_count":11,"has_kev":16},{"version":179,"cve_count":21,"kev_count":11,"has_kev":16},{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},{"version":187,"cve_count":21,"kev_count":11,"has_kev":16},[277,285,293,300,306,311,316,322,328,335],{"cveId":278,"description":279,"publishedDate":280,"cvssScore":281,"cvssVersion":282,"severity":283,"isKev":16,"epssScore":284},"CVE-2015-5162","The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image.","2016-10-07",7.5,"v3.0","High",0.03088,{"cveId":286,"description":287,"publishedDate":288,"cvssScore":289,"cvssVersion":290,"severity":291,"isKev":16,"epssScore":292},"CVE-2013-4428","OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.","2013-10-27",3.5,"v2","Low",0.03082,{"cveId":294,"description":295,"publishedDate":296,"cvssScore":297,"cvssVersion":282,"severity":298,"isKev":16,"epssScore":299},"CVE-2016-8611","A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `\u002Fimages` API POST method for authenticated users, resulting in possible denial of service attacks through database table saturation.","2018-07-31",6.5,"Medium",0.02297,{"cveId":301,"description":302,"publishedDate":303,"cvssScore":304,"cvssVersion":282,"severity":298,"isKev":16,"epssScore":305},"CVE-2017-7200","An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http:\u002F\u002Flocalhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.","2017-03-21",5.8,0.02057,{"cveId":307,"description":308,"publishedDate":309,"cvssScore":289,"cvssVersion":290,"severity":291,"isKev":16,"epssScore":310},"CVE-2015-5163","The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.","2015-08-19",0.01499,{"cveId":312,"description":313,"publishedDate":314,"cvssScore":289,"cvssVersion":290,"severity":291,"isKev":16,"epssScore":315},"CVE-2013-1840","The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image.","2013-03-22",0.01367,{"cveId":317,"description":318,"publishedDate":319,"cvssScore":320,"cvssVersion":290,"severity":298,"isKev":16,"epssScore":321},"CVE-2015-3289","OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.","2015-08-14",4,0.01307,{"cveId":323,"description":324,"publishedDate":325,"cvssScore":326,"cvssVersion":282,"severity":298,"isKev":16,"epssScore":327},"CVE-2015-8234","The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.","2017-03-29",5.5,0.01262,{"cveId":329,"description":330,"publishedDate":331,"cvssScore":332,"cvssVersion":333,"severity":298,"isKev":16,"epssScore":334},"CVE-2022-47951","An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","2023-01-26",5.7,"v3.1",0.01034,{"cveId":336,"description":337,"publishedDate":12,"cvssScore":297,"cvssVersion":333,"severity":298,"isKev":16,"epssScore":338},"CVE-2024-32498","An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.",0.00835,[],{"title":341,"metaDescription":342,"keywords":343,"structuredData":344},"Glance by Openstack - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Glance by Openstack covering 86 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Glance vulnerabilities, Glance security, Glance CVE, Openstack Glance, Glance threat intelligence, Openstack security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":345,"@type":346,"name":347,"description":342,"url":348,"manufacturer":349,"applicationCategory":353,"softwareVersion":354,"mainEntity":355},"https:\u002F\u002Fschema.org","SoftwareApplication","Glance","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopenstack\u002Fglance",{"@type":350,"name":351,"url":352},"Organization","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenstack","Security Software","86 versions tracked",{"@type":356,"name":357,"description":358,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Glance Security Vulnerabilities","Security vulnerabilities affecting Glance by Openstack",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":360,"apiVersion":361},"2026-10-18T16:38:18.379Z","3.0",{"rows":363,"total":11,"capped":16,"failed":11},[],[]]