Description (CNA)
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / Nova | affected 18.0.0 before 31.3.1; affected 32.0.0 before 32.2.1; affected 33.0.0 before 33.0.2 |
CWE
CWE-669
References
- https://bugs.launchpad.net/nova/+bug/2151252
- https://www.openwall.com/lists/oss-security/2026/06/16/5
ADP enrichment
No English description supplied.
No English description supplied.