{"schemaVersion":3,"id":"USN-8199-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"glance vulnerabilities\n\nMartin Kaesberger discovered that OpenStack Glance's image processing could\nreturn the contents of arbitrary files. An attacker could possibly use this\nissue to exfiltrate sensitive data. This issue only affected Ubuntu 16.04\nLTS and Ubuntu 18.04 LTS. (CVE-2024-32498)\n\nHyeongeun Ji and Abhishek Kekane discovered several server-side request\nforgery vulnerabilities in OpenStack Glance's image import. An attacker\ncould possibly use this issue to bypass URL validation checks and redirect\nto internal services. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2026-34881)","dates":{"published":"2026-04-22T18:04:46.000Z","modified":"2026-06-30T18:15:40.941Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"glance","name":"glance","label":"glance","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/glance","purlType":"deb","versions":[{"text":"< 2:12.0.0-0ubuntu2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 2:16.0.1-0ubuntu1.1+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 2:20.2.0-0ubuntu1.2+esm2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:12.0.0-0ubuntu2+esm1 | < 2:16.0.1-0ubuntu1.1+esm2 | < 2:20.2.0-0ubuntu1.2+esm2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8199-1","label":"ubuntu.com/security/notices/USN-8199-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-32498","label":"ubuntu.com/security/CVE-2024-32498","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-34881","label":"ubuntu.com/security/CVE-2026-34881","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2024-32498","CVE-2026-34881"]},"timeline":[{"kind":"published","date":"2026-04-22T18:04:46.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-30T18:15:40.941Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T02:27:40.401Z","stale":false,"partial":false}}