ChainPyPI:cinder
cinder: incomplete fixes (2022–2024)
3 CVEs over 2 generations, 26 Jan 2023 to 24 Jul 2024.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2022-4795126 Jan 2023 First in the chain
- CVE-2024-324985 Jul 2024 No direct link to an earlier CVE
- CVE-2024-4076724 Jul 2024 incomplete fix for CVE-2022-47951incomplete fix for CVE-2024-32498
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-47951 | 26 Jan 2023 | An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x… | First in chain | 16.8 |
| CVE-2024-32498 | 5 Jul 2024 | An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3 | First in chain | 16.1 |
| CVE-2024-40767 | 24 Jul 2024 | In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is… | CVE-2022-47951 · incomplete fix · High | 16.8 |