Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2014-4167

openstack-neutron: L3-agent denial of service through IPv6 subnet

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Openstack
CVE-2014-5253

openstack-keystone: domain-scoped tokens don't get revoked

OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.

CVSS 2.0 · 4.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2014-3608

openstack-nova: incomplete fix for CVE-2014-2573, Nova VMware driver still leaks rescued images

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.

CVSS 2.0 · 2.7 Low EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3632

openstack-neutron: regression of fix for CVE-2013-6433

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2014-3594

openstack-horizon: persistent XSS in Horizon Host Aggregates interface

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

CVSS 2.0 · 3.5 Low EPSS 2.1% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-3621

openstack-keystone: configuration data information leak through Keystone catalog

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by "$(admin_token)" in the publicurl endpoint field.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Enterprise Linux and 1 more
CVE-2014-3708

openstack-nova: Nova network denial of service through API filtering

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3801

openstack-heat: authenticated information leak in Heat

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

CVSS 2.0 · 3.5 Low EPSS 1.6% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2014-4615

pycadf: token leak to message queue

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Oslo and 3 more
CVE-2014-5251

openstack-keystone: revocation events are broken with mysql

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.

CVSS 2.0 · 4.9 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2014-3641

openstack-cinder: Cinder-volume host data leak to virtual machine instance

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Openstack
CVE-2014-5356

openstack-glance: Glance store disk space exhaustion

OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-3497

openstack-swift: XSS in Swift requests through WWW-Authenticate header

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2014-3517

openstack-nova: timing attack issue allows access to other instances' configuration information

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3475

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

CVSS 2.0 · 3.5 Low EPSS 1.2% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-3474

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name.

CVSS 2.0 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-3476

openstack-keystone: privilege escalation through trust chained delegation

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.

CVSS 2.0 · 6.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack Redhat Suse
Products
Keystone Openstack Cloud
CVE-2014-3520

openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2014-0187

openstack-neutron: security groups bypass through invalid CIDR

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

CVSS 2.0 · 9.0 Critical EPSS 3.0% KEV · Not listed
Vendors
Canonical Openstack Opensuse and 1 more
Products
Ubuntu Linux Neutron Opensuse and 1 more
CVE-2014-0167

openstack-nova: RBAC policy not properly enforced in Nova EC2 API

The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.

CVSS 2.0 · 6.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Icehouse Openstack