CVE-2016-8576

Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch

The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Opensuse Qemu and 1 more

Products

Debian Linux Leap Qemu and 3 more

CVE-2014-6414

openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Neutron Openstack

CVE-2014-5356

openstack-glance: Glance store disk space exhaustion

OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Image Registry And Delivery Service \(glance\) Openstack

CVE-2016-8669

Qemu: char: divide by zero error in serial_update_parameters

The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Opensuse Qemu and 1 more

Products

Debian Linux Leap Qemu and 3 more

CVE-2014-5253

openstack-keystone: domain-scoped tokens don't get revoked

OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.

CVSS 2.0 · 4.9 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Keystone Openstack

CVE-2014-5252

openstack-keystone: token expiration date stored incorrectly

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.

CVSS 2.0 · 4.9 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Keystone Openstack

CVE-2014-5251

openstack-keystone: revocation events are broken with mysql

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.

CVSS 2.0 · 4.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Keystone Openstack

CVE-2014-4615

pycadf: token leak to message queue

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Neutron Oslo and 3 more

CVE-2014-4287

mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-4274

mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

CVSS 2.0 · 4.1 Medium EPSS < 1% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Solaris and 3 more

CVE-2014-4260

mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

CVSS 2.0 · 5.5 Medium EPSS 3.5% KEV · Not listed

Vendors

Debian Mariadb Oracle and 2 more

Products

Debian Linux Mariadb Mysql and 8 more

CVE-2014-4258

mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

CVSS 2.0 · 6.5 Medium EPSS 3.5% KEV · Not listed

Vendors

Debian Mariadb Opensuse Project and 4 more

Products

Debian Linux Mariadb Suse Linux Enterprise Desktop and 12 more

CVE-2014-4207

mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed

Vendors

Debian Mariadb Oracle and 2 more

Products

Debian Linux Mariadb Mysql and 7 more

CVE-2014-4167

openstack-neutron: L3-agent denial of service through IPv6 subnet

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Neutron Openstack

CVE-2014-3801

openstack-heat: authenticated information leak in Heat

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

CVSS 2.0 · 3.5 Low EPSS 1.6% KEV · Not listed

Vendors

Openstack Redhat

Products

Heat Openstack

CVE-2014-3708

openstack-nova: Nova network denial of service through API filtering

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Openstack Redhat

Products

Nova Openstack

CVE-2014-3703

Neutron: security groups fail to block traffic properly due to packstack configuration

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed

Vendors

Redhat

Products

Openstack Packstack

CVE-2014-3691

foreman-proxy: failure to verify SSL certificates

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Redhat Theforeman

Products

Openstack Openstack-installer Satellite and 2 more

CVE-2014-3641

openstack-cinder: Cinder-volume host data leak to virtual machine instance

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed

Vendors

Openstack Redhat

Products

Cinder Openstack

CVE-2014-3632

openstack-neutron: regression of fix for CVE-2013-6433

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed

Vendors

Openstack Redhat

Products

Neutron Openstack