Security Flaw Allowing Malicious Template Registration in Apache CloudStack

CVE-2024-50386

What is CVE-2024-50386?

In Apache CloudStack, account users are permitted by default to register templates for direct download to primary storage, which poses a significant security risk. This vulnerability stems from inadequate validation checks for KVM-compatible templates in several versions. An attacker capable of registering templates could deploy malicious instances on KVM environments, potentially compromising the host filesystem. This could lead to severe consequences, including data loss, integrity issues, and denial of service for KVM infrastructures managed by CloudStack. It is advised to upgrade to version 4.18.2.5 or 4.19.1.3 or later and to perform stringent checks on user-registered KVM templates to ensure they do not possess unnecessary functionalities that could be exploited.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References