python-oslo-messaging vulnerabilities (Red Hat)
69 vulnerabilities.
-
python-oslo-messagingRed Hat OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake 7.4 High -
python-oslo-messagingRed Hat Inefficient candidate hostname parsing in crypto/x509 6.5 Medium -
python-oslo-messagingRed Hat nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 7.6 High -
python-oslo-messagingRed Hat Non-CA certificate accepted as intermediate issuer in public_key path validation 7.0 High -
python-oslo-messagingRed Hat Crash when handling long CNAME response in net 7.5 High -
python-oslo-messagingRed Hat OpenStack Keystone has an Incorrect Authorization Issue 7.9 High -
python-oslo-messagingRed Hat OpenStack Keystone: Restricted application credentials can create EC2 credentials 3.5 Low -
python-oslo-messagingRed Hat Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
python-oslo-messagingRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
python-oslo-messagingRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
python-oslo-messagingRed Hat Inefficient policy validation in crypto/x509 7.5 High -
python-oslo-messagingRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
python-oslo-messagingRed Hat OpenStack Glance is affected by Server-Side Request Forgery (SSRF) 5.0 Medium -
python-oslo-messagingRed Hat etcd: Authorization bypasses in multiple APIs 8.8 High -
python-oslo-messagingRed Hat gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
python-oslo-messagingRed Hat Incorrect parsing of IPv6 host literals in net/url 7.5 High -
python-oslo-messagingRed Hat Incorrect enforcement of email constraints in crypto/x509 7.5 High -
python-oslo-messagingRed Hat OpenStack Nova calls qemu-img without format restrictions for resize 8.2 High -
python-oslo-messagingRed Hat pyasn1 has a DoS vulnerability in decoder 7.5 High -
python-oslo-messagingRed Hat Unexpected session resumption in crypto/tls 10.0 Critical -
python-oslo-messagingRed Hat Memory exhaustion in query parameter parsing in net/url 7.5 High -
python-oslo-messagingRed Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
python-oslo-messagingRed Hat OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization. 7.5 High -
python-oslo-messagingRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
python-oslo-messagingRed Hat Service monitor mac flow is not rate limited 5.3 Medium -
python-oslo-messagingRed Hat Cri-o: security regression of cve-2022-27652 4.8 Medium -
python-oslo-messagingRed Hat Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
python-oslo-messagingRed Hat Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
python-oslo-messagingRed Hat Improper handling of special tags within script contexts in html/template 6.1 Medium -
python-oslo-messagingRed Hat Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
python-oslo-messagingRed Hat Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
python-oslo-messagingRed Hat Improper rendering of text nodes in golang.org/x/net/html 6.1 Medium -
python-oslo-messagingRed Hat goproxy Denial of Service vulnerability 7.5 High -
python-oslo-messagingRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
python-oslo-messagingRed Hat Withdrawn: Use after free in SciPy 9.8 Critical -
python-oslo-messagingRed Hat Ocp & fips mode 7.0 High -
python-oslo-messagingRed Hat Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin 6.5 Medium -
python-oslo-messagingRed Hat Bypassing policies imposed by the ImagePolicyWebhook admission plugin 6.5 Medium -
python-oslo-messagingRed Hat Unauthorized read of Custom Resources 6.5 Medium -
python-oslo-messagingRed Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... 7.4 High -
python-oslo-messagingRed Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
python-oslo-messagingRed Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
python-oslo-messagingRed Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
python-oslo-messagingRed Hat Unbounded memory consumption when reading headers in archive/tar 7.5 High -
python-oslo-messagingRed Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure 7.1 High -
python-oslo-messagingRed Hat Failure to strip relative path components in net/url 7.5 High -
python-oslo-messagingRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
python-oslo-messagingRed Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks 7.4 High -
python-oslo-messagingRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
python-oslo-messagingRed Hat Exposure of client IP addresses in net/http 6.5 Medium - Show olderLoading…