OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44919US | medium6.5 | — | ||
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL. | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugs.launchpad.net/ironic/+bug/2150332WEB
- https://github.com/advisories/GHSA-4g73-w726-53h3ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-44919ADVISORY
- https://opendev.org/openstack/ironicPACKAGE
- https://opendev.org/openstack/ironic/commit/a3f6d735ac3642ab95b49142c7305f072ae748d0WEB
- https://pypi.org/project/ironicPACKAGE
- https://security.openstack.org/ossa/OSSA-2026-013.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan