Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 826

Export CSV
CVE-2014-0162

openstack-glance: remote code execution in Glance Sheepdog backend

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

CVSS 2.0 · 6.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Icehouse Image Registry And Delivery Service \(glance\) Openstack
CVE-2016-1285

bind: malformed packet sent to rndc can trigger assertion failure

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

CVSS 3.1 · 6.8 Medium EPSS 57.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 48 more
CVE-2014-0157

openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2016-0757

openstack-glance: Glance image status manipulation through locations

OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image.

CVSS 3.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Image Registry And Delivery Service \(glance\) Openstack
CVE-2016-0738

openstack-swift: Proxy to server DoS through Large Objects

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2016-0737

openstack-swift: Client to proxy DoS through Large Objects

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2016-0264

JDK: buffer overflow vulnerability in the IBM JVM

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1 · 5.6 Medium EPSS 3.9% KEV · Not listed
Vendors
Ibm Redhat Suse
Products
Java Sdk Enterprise Linux Desktop Enterprise Linux Hpc Node Supplementary and 12 more
CVE-2015-8914

openstack-neutron: ICMPv6 source address spoofing vulnerability

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

CVSS 3.0 · 9.1 Critical EPSS 4.3% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2015-8863

jq: heap-buffer-overflow in tokenadd() function

Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Jq Project Opensuse Redhat
Products
Jq Leap Opensuse and 1 more
CVE-2015-8818

Qemu: OOB access in address_space_rw leads to segmentation fault

The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Openstack
CVE-2015-8817

Qemu: OOB access in address_space_rw leads to segmentation fault

QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Openstack
CVE-2015-8786

rabbitmq-server: DoS via lengths_age or lengths_incr parameter in the management plugin

The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

CVSS 3.0 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Oracle Pivotal Software Redhat
Products
Solaris Rabbitmq Openstack
CVE-2015-8213

python-django: Information leak through date template filter

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2014-0150

qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function

Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2015-8080

redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Debian Opensuse Redhat and 1 more
Products
Debian Linux Leap Opensuse and 3 more
CVE-2015-7713

openstack-nova: network security group changes are not applied to running instances

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2015-7548

openstack-nova: Unprivileged API user can access host data using instance snapshot

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS 3.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2015-7512

Qemu: net: pcnet: buffer overflow in non-loopback mode

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

CVSS 3.1 · 9.0 Critical EPSS 7.7% KEV · Not listed
Vendors
Debian Oracle Qemu and 1 more
Products
Debian Linux Linux Qemu and 7 more
CVE-2014-0134

openstack-nova: Nova host data leak to vm instance in rescue mode

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

CVSS 2.0 · 3.5 Low EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Openstack
CVE-2014-0105

python-keystoneclient: Potential context confusion in Keystone middleware

The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."

CVSS 2.0 · 6.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Python-keystoneclient Openstack Storage