Description (CNA)
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / Ironic | affected 30.0.0 through 32.1.1; affected 33.0.0 through 35.1.1; affected 36.0.0 through 39.0.1 |
CWE
CWE-409