MEDIUM 4.3
GHSA-4g73-w726-53h3
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices
Details
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / ironic
Introduced in:
0 No fixed version published yet for ironic (pip). Pin to a known-safe version or switch to an alternative.