Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 826

Export CSV
CVE-2012-3542

Keystone: Lack of authorization for adding users to tenants

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Essex Horizon Openstack
CVE-2013-0914

Kernel: sa_restorer information leak

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 1 more
CVE-2013-1640

Puppet: catalog request code execution

The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.

CVSS 2.0 · 9.0 Critical EPSS 4.9% KEV · Not listed
Vendors
Canonical Puppet Redhat
Products
Ubuntu Linux Puppet Puppet Enterprise and 1 more
CVE-2013-1652

Puppet: HTTP GET request catalog retrieval

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspecified vectors.

CVSS 2.0 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Puppet Puppetlabs and 1 more
Products
Ubuntu Linux Puppet Puppet Enterprise and 2 more
CVE-2013-1654

Puppet: SSL protocol downgrade

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote attackers to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Puppet Puppetlabs and 1 more
Products
Ubuntu Linux Puppet Puppet Enterprise and 2 more
CVE-2013-1664

bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Folsom Compute \(nova\) Essex Compute \(nova\) Folsom and 4 more
CVE-2013-1665

bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Keystone Essex Openstack
CVE-2013-1838

Nova: DoS by allocating all Fixed IPs

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Essex Folsom and 2 more
CVE-2013-1848

kernel: ext3: format string issues

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 2 more
CVE-2013-1865

keystone: online validation of Keystone PKI tokens bypasses revocation check

OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Folsom Openstack
CVE-2013-2006

keystone: DEBUG level LDAP password disclosure in log files

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2013-2029

core: Insecure temporary file usage in nagios.upgrade_to_v3.sh

nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openstack
CVE-2013-2099

python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns

Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Canonical Python Redhat
Products
Ubuntu Linux Python Openstack and 5 more
CVE-2013-2104

Keystone: Missing expiration check in Keystone PKI token validation

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.

CVSS 2.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Python-keystoneclient Openstack
CVE-2013-2113

Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.

CVSS 2.0 · 6.0 Medium EPSS 20.9% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Foreman
CVE-2013-2121

Foreman: app/controllers/bookmarks_controller.rb remote code execution

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.

CVSS 2.0 · 6.0 Medium EPSS 24.8% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Satellite Foreman
CVE-2013-2128

Kernel: net: oops from tcp_collapse() when using splice(2)

The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Openstack
CVE-2013-2146

Kernel: perf/x86: offcore_rsp valid mask for SNB/IVB

arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 1 more
CVE-2013-2157

openstack-keystone: Authentication bypass when using LDAP backend

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2013-2161

Swift: Unchecked user input in Swift XML responses

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Folsom Grizzly Havana and 2 more