openvswitch2.15 vulnerabilities (Red Hat)
39 vulnerabilities.
-
openvswitch2.15Red Hat A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will... 8.2 High -
openvswitch2.15Red Hat An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. 9.8 Critical -
openvswitch2.15Red Hat An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. 9.8 Critical -
openvswitch2.15Red Hat NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in... 6.5 Medium -
openvswitch2.15Red Hat A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker... 8.6 High -
openvswitch2.15Red Hat A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected... 6.5 Medium -
openvswitch2.15Red Hat A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not... 7.5 High -
openvswitch2.15Red Hat coreos-installer < 0.10.0 writes world-readable Ignition config to installed system 5.5 Medium -
openvswitch2.15Red Hat A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An... 7.5 High -
openvswitch2.15Red Hat Holes in EndpointSlice Validation Enable Host Network Hijack 2.7 Low -
openvswitch2.15Red Hat It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster... 4.6 Medium -
openvswitch2.15Red Hat Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in... 5.5 Medium -
openvswitch2.15Red Hat Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2). 7.5 High -
openvswitch2.15Red Hat SessionListener can prevent a session from being invalidated breaking logout 2.9 Low -
openvswitch2.15Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
openvswitch2.15Red Hat Validating Admission Webhook does not observe some previous fields 6.5 Medium -
openvswitch2.15Red Hat mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs 8.5 High -
openvswitch2.15Red Hat Cross-Site Request Forgery in Jenkins Credentials Plugin 6.1 Medium -
openvswitch2.15Red Hat Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
openvswitch2.15Red Hat Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs 4.3 Medium -
openvswitch2.15Red Hat CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files 5.4 Medium -
openvswitch2.15Red Hat Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs 6.5 Medium -
openvswitch2.15Red Hat XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin 8.1 High -
openvswitch2.15Red Hat View name validation bypass in Jenkins 4.3 Medium -
openvswitch2.15Red Hat Lack of type validation in agent related REST API in Jenkins 4.3 Medium -
openvswitch2.15Red Hat Improper Locking in github.com/containers/storage 6.5 Medium -
openvswitch2.15Red Hat Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items 6.5 Medium -
openvswitch2.15Red Hat In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... 6.5 Medium -
openvswitch2.15Red Hat Stored XSS vulnerability in Jenkins on new item page 5.4 Medium -
openvswitch2.15Red Hat Reflected XSS vulnerability in Jenkins markup formatter preview 6.1 Medium -
openvswitch2.15Red Hat Missing permission check for paths with specific prefix in Jenkins 5.3 Medium -
openvswitch2.15Red Hat Stored XSS vulnerability in Jenkins button labels 5.4 Medium -
openvswitch2.15Red Hat Excessive memory allocation in graph URLs leads to denial of service in Jenkins 6.5 Medium -
openvswitch2.15Red Hat Arbitrary file existence check in file fingerprints in Jenkins 4.3 Medium -
openvswitch2.15Red Hat Path traversal vulnerability in Jenkins agent names 8.0 High -
openvswitch2.15Red Hat Improper handling of REST API XML deserialization errors in Jenkins 8.0 High -
openvswitch2.15Red Hat XSS vulnerability in Jenkins notification bar 5.4 Medium -
openvswitch2.15Red Hat Arbitrary file read vulnerability in workspace browsers in Jenkins 6.5 Medium -
openvswitch2.15Red Hat Improper Input Validation in GoGo Protobuf 8.6 High