Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2014-3608

openstack-nova: incomplete fix for CVE-2014-2573, Nova VMware driver still leaks rescued images

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.

CVSS 2.0 · 2.7 Low EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3632

openstack-neutron: regression of fix for CVE-2013-6433

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2014-3708

openstack-nova: Nova network denial of service through API filtering

OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3801

openstack-heat: authenticated information leak in Heat

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

CVSS 2.0 · 3.5 Low EPSS 1.6% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2014-4615

pycadf: token leak to message queue

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Oslo and 3 more
CVE-2014-5251

openstack-keystone: revocation events are broken with mysql

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.

CVSS 2.0 · 4.9 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2014-5356

openstack-glance: Glance store disk space exhaustion

OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-0162

openstack-glance: remote code execution in Glance Sheepdog backend

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

CVSS 2.0 · 6.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Icehouse Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-3497

openstack-swift: XSS in Swift requests through WWW-Authenticate header

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2013-6433

openstack-quantum/openstack-neutron: rootwrap sudo config allows potential privilege escalation

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

CVSS 2.0 · 7.6 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Openstack
CVE-2013-6437

openstack-nova: DoS through ephemeral disk backing files

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.

CVSS 2.0 · 4.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-7821

openstack-neutron: DoS via maliciously crafted dns_nameservers

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Fedoraproject Openstack Redhat
Products
Fedora Neutron Openstack
CVE-2014-8124

python-django-horizon: denial of service via login page requests

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Fedoraproject Openstack Opensuse and 2 more
Products
Fedora Horizon Opensuse and 2 more
CVE-2014-8333

openstack-nova: Nova VMware instance in resize state may leak

The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.

CVSS 2.0 · 4.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Enterprise Linux Openstack
CVE-2014-0157

openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-0056

openstack-neutron: insufficient authorization checks when creating ports

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

CVSS 2.0 · 2.1 Low EPSS 1.4% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Openstack
CVE-2014-0105

python-keystoneclient: Potential context confusion in Keystone middleware

The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."

CVSS 2.0 · 6.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Python-keystoneclient Openstack Storage
CVE-2014-0134

openstack-nova: Nova host data leak to vm instance in rescue mode

The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.

CVSS 2.0 · 3.5 Low EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Openstack
CVE-2014-3476

openstack-keystone: privilege escalation through trust chained delegation

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.

CVSS 2.0 · 6.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack Redhat Suse
Products
Keystone Openstack Cloud