CVE catalog

CVE-2024-7319

heat: CVE-2024-7319

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianheatsid1:27.0.0-4vulnerable
Debianheatforky1:26.0.1-1vulnerable
Debianheattrixie1:24.0.0-2vulnerable
Debianheatbookworm1:19.0.0-3vulnerable
Ubuntuheat16.041:5.0.0-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0~b1-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0~b2-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0~b2-0ubuntu2vulnerable
Ubuntuheat16.041:6.0.0~b3-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0~rc1-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0-0ubuntu1vulnerable
Ubuntuheat16.041:6.0.0-0ubuntu1.1vulnerable
Ubuntuheat16.041:6.1.0-0ubuntu1vulnerable
Ubuntuheat16.041:6.1.1-0ubuntu1vulnerable
Ubuntuheat16.041:6.1.2-0ubuntu1vulnerable
Ubuntuheat16.041:6.1.2-0ubuntu1.1vulnerable
Ubuntuheat18.041:9.0.0-0ubuntu1vulnerable
Ubuntuheat18.041:10.0.0~b1-0ubuntu1vulnerable
Ubuntuheat18.041:10.0.0~b2-0ubuntu1vulnerable
Ubuntuheat18.041:10.0.0-0ubuntu1.1vulnerable
Ubuntuheat18.041:10.0.1-0ubuntu1vulnerable
Ubuntuheat18.041:10.0.1-0ubuntu2vulnerable
Ubuntuheat18.041:10.0.2-0ubuntu1vulnerable
Ubuntuheat18.041:10.0.2-0ubuntu1.1vulnerable
Ubuntuheat20.041:13.0.0-0ubuntu1vulnerable
Ubuntuheat20.041:14.0.0~b1~git2019121613.7b606461e-0ubuntu1vulnerable
Ubuntuheat20.041:14.0.0~b2~git2020021413.94bdcd8c9-0ubuntu2vulnerable
Ubuntuheat20.041:14.0.0~b3~git2020032414.d8354d908-0ubuntu1vulnerable
Ubuntuheat20.041:14.0.0~b3~git2020041012.2ef9f4bf3-0ubuntu1vulnerable
Ubuntuheat20.041:14.0.0-0ubuntu0.20.04.1vulnerable
Ubuntuheat20.041:14.1.0-0ubuntu1vulnerable
Ubuntuheat20.041:14.2.0-0ubuntu1vulnerable
Ubuntuheat20.041:14.2.0-0ubuntu1.1vulnerable
Ubuntuheat20.041:14.2.0-0ubuntu2vulnerable
Ubuntuheat22.041:17.0.0-0ubuntu1vulnerable
Ubuntuheat22.041:17.0.0+git2021120816.fe8fba8c9-0ubuntu2vulnerable
Ubuntuheat22.041:17.0.0+git2022011216.9af3af156-0ubuntu1vulnerable
Ubuntuheat22.041:17.0.0+git2022011216.9af3af156-0ubuntu3vulnerable
Ubuntuheat22.041:17.0.1+git2022030311.968969b99-0ubuntu1vulnerable
Ubuntuheat22.041:18.0.0-0ubuntu1vulnerable
Ubuntuheat22.041:18.0.0-0ubuntu1.1vulnerable
Ubuntuheat22.041:18.0.0-0ubuntu1.2vulnerable
Ubuntuheat22.041:18.0.1-0ubuntu1vulnerable
Ubuntuheat22.041:18.0.1-0ubuntu1.1vulnerable
Ubuntuheat22.041:18.0.1-0ubuntu1.2vulnerable
Ubuntuheat22.041:18.0.1-0ubuntu1.3vulnerable
Ubuntuheat22.041:18.0.1-0ubuntu1.4vulnerable
Ubuntuheat24.041:21.0.0-0ubuntu2vulnerable
Ubuntuheat24.041:21.0.0-0ubuntu3vulnerable
Ubuntuheat24.041:21.0.0+git2024011916.2df46d4c-0ubuntu1vulnerable
Ubuntuheat24.041:22.0.0~rc1-0ubuntu1vulnerable
Ubuntuheat24.041:22.0.0-0ubuntu1vulnerable
Ubuntuheat24.041:22.0.0-0ubuntu2vulnerable
Ubuntuheat24.041:22.0.1-0ubuntu1vulnerable
Ubuntuheat24.041:22.0.1-0ubuntu1.1vulnerable
Ubuntuheat24.041:22.0.1-0ubuntu1.2vulnerable
Ubuntuheat24.041:22.0.1-0ubuntu1.3vulnerable
Ubuntuheat24.041:22.0.1-0ubuntu1.4vulnerable
Ubuntuheat25.101:24.0.0-0ubuntu1vulnerable
Ubuntuheat25.101:25.0.0-0ubuntu1vulnerable
Ubuntuheat26.101:26.0.0-0ubuntu1vulnerable
Ubuntuheat26.101:26.0.0-0ubuntu2vulnerable
Ubuntuheat26.101:26.0.0-0ubuntu3vulnerable
Ubuntuheat26.101:26.0.0+git20260814.107.c4a566c-0ubuntu1vulnerable
Ubuntuheat26.101:27.0.0~rc1-0ubuntu1vulnerable
Ubuntuheat26.101:27.0.0-0ubuntu1vulnerable
Ubuntuheat26.041:25.0.0-0ubuntu1vulnerable
Ubuntuheat26.041:25.0.0+git20260124.b471f4a-0ubuntu1vulnerable
Ubuntuheat26.041:26.0.0~rc1-0ubuntu1vulnerable
Ubuntuheat26.041:26.0.0-0ubuntu1vulnerable
Ubuntuheat26.041:26.0.0-0ubuntu1.1vulnerable
Ubuntuheat26.041:26.0.0-0ubuntu1.2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianheatsourcesid(unfixed)unimportantNot reported[1082855]
Debianheatsourceforky(unfixed)unimportantNot reported[1082855]
Debianheatsourcetrixie(unfixed)unimportantNot reported[1082855]
Debianheatsourcebookworm(unfixed)unimportantNot reported[1082855]

[Debian bug #1082855]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [heat-api]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

  • [heat-api-cfn]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

  • [heat-common]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

  • [heat-doc]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

  • [heat-engine]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

  • [python3-heat]Affected

    Source package: [heat]

    Details (2)

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

    • 1:19.0.0-3 · all · bookworm

      Affected

      dsa · heat · debian · bookworm; dsa · heat · debian · 12

[Debian 13 (Trixie)]

  • [heat-api]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

  • [heat-api-cfn]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

  • [heat-common]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

  • [heat-doc]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

  • [heat-engine]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

  • [python3-heat]Affected

    Source package: [heat]

    Details (2)

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

    • 1:24.0.0-2 · all · trixie

      Affected

      dsa · heat · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]