Skip to contentOpenstack vulnerabilities
Newest
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped contextCVE-2020-12689Fix available8.8 High
- openstack manilaOpenStack Manila Unprivileged users can retrieve, use and manipulate share networksCVE-2020-9543Fix available8.3 High
- openstack novaOpenStack Nova can leak consoleauth token into log filesCVE-2015-9543Fix available3.3 Low
- openstack horizon, python-django-horizon, redhat openstack +2 more +4 moreThe file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS...CVE-2012-5474Fix available5.5 Medium
- debian linux, openstack horizon, openstack-dashboard +2 moreWithin the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum...CVE-2012-54765.5 Medium
- openstack python-keystoneclient, debian linux, redhat openstack +2 moreInsufficient Verification of Data Authenticity in python-keystoneclientCVE-2013-2167Fix available9.8 Critical
- openstack python-keystoneclient, debian linux, fedoraproject fedora +1 more +3 moreInadequate Encryption Strength in python-keystoneclientCVE-2013-2166Fix available9.8 Critical
- openstack keystoneOpenStack Keystone Credential LeakageCVE-2019-19687Fix available8.8 High
- openstack nova, debian linux, openstack-nova +2 moreOpenStack nova base images permissions are world readableCVE-2013-03265.5 Medium
- novaOpenStack Nova Exposure of Sensitive Information to an Unauthorized ActorCVE-2011-4076Fix available5.9 Medium
- openstack designate, debian linux, redhat enterprise linux openstack platform +2 moreDesignate does not enforce the DNS protocol limit concerning record set sizesCVE-2015-5694Fix available6.5 Medium
- keystone, debian linux +1 moreOpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack spaceCVE-2012-1572Fix available7.5 High
- openstack compute, keystone, redhat openstack +1 more +3 moreOpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255Fix available5.9 Medium
- openstack os-vifOpenStack os-vif Ageing time of 0 disables linuxbridge MAC learningCVE-2019-15753Fix available9.1 Critical
- openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Nova Server Resource Faults Leak External Exception DetailsCVE-2019-14433Fix available6.5 Medium
- openstack ironic-inspector, redhat openstack, openstack-ironic-inspector +2 moreOpenstack ironic-inspector has SQL injection vulnerability in node_cacheCVE-2019-10141Fix available8.3 High
- openstack octavia, redhat openstack, red hat openstack-tripleo-common +2 moreOpenstack Octavia Access Control VulnerabilityCVE-2019-3895Fix available5.5 Medium
- openstack novaqcow format could expose host filesystem informationCVE-2011-3147Fix available2.8 Low
- openstack neutron, redhat openstack +1 moreOpenStack Neutron overlapping security group rules prevents compute node network configurationCVE-2019-10876Fix available6.5 Medium
- openstack ceilometer, [unknown] openstack-ceilometer, redhat openstack +2 moreCeilometer Prints Sensitive Configuration Data to LogCVE-2019-3830Fix available4.0 Medium
- [unknown] openstack-octavia, openstack octavia, redhat openstack +2 moreOpenstack Octavia allows Insertion of Sensitive Information into Log FileCVE-2018-16856Fix available5.5 Medium
- openstack neutron, redhat openstack, debian linux +2 moreOpenStack Neutron's unsupported dport option prevents applying security groupsCVE-2019-9735Fix available6.5 Medium
- openstack keystone** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because...CVE-2018-20170Fix availableDisputed5.3 Medium
- openstack neutron, the openstack project openstack-neutron +1 moreOpenstack Neutron vulnerable to eavesdropping on private trafficCVE-2018-14636Fix available5.3 Medium
- openstack neutron, redhat openstack, the openstack project openstack-neutron +2 moreOpensStack Neutron Denial of Service VulnerabilityCVE-2018-14635Fix available6.5 Medium
- openstack cinder, openstack foundation openstack-cinder, redhat openstack +2 moreA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...CVE-2017-15139Fix available5.1 Medium
- openstack tripleo-common, red hat openstack-tripleo-common, redhat openstack +2 moreA flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and...CVE-2017-26278.2 High
- openstack glance, the openstack foundation openstack-glance +1 moreA vulnerability was found in Openstack Glance. No limits are enforced within the Glance image...CVE-2016-8611Fix available4.3 Medium
- openstack keystone, redhat openstack, debian linux +2 moreIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...CVE-2018-14432Fix available5.3 Medium
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreA vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When...CVE-2018-10898Fix available8.8 High
- openstack heat, redhat openstack, red hat openstack-heat +2 moreAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1...CVE-2017-2621Fix available5.9 Medium
- openstack neutron, red hat openstack-neutron, redhat openstack +2 moreOpenStack Neutron Race Condition vulnerabilityCVE-2017-7543Fix available5.3 Medium
- openstack puppet-swift, redhat openstack +1 morepuppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat...CVE-2016-9590Fix available6.5 Medium
- openstack puppet-tripleo, redhat openstack +1 morepuppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the...CVE-2016-9599Fix available7.1 High
- openstack nova, redhat openstack +1 moreOpenStack Nova Denial of service attack on the compute hostCVE-2017-18191Fix available7.5 High
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- [unknown] openstack-tripleo-heat-templates, ceph +1 moreOpenstack tripleo-heat-templates unauthenticated file accessCVE-2017-12155Fix available6.3 Medium
- openstack novaOpenStack Nova DoS by rebuilding the same instance with a new image multiple timesCVE-2017-17051Fix available8.6 High
- openstack swauth, swift, debian linux +2 moreOpenStack Swauth object/proxy server writing Auth Token to log fileCVE-2017-16613Fix available9.8 Critical
- openstack novaOpenStack Nova Filter Scheduler BypassCVE-2017-16239Fix available6.5 Medium
- openstack instack-undercloudinstack-undercloud vulnerable to symlink attack on tmp filesCVE-2017-7549Fix available6.4 Medium
- openstack designateDesignate mDNS DoS through incorrect handling of large RecordSetsCVE-2015-5695Fix available6.5 Medium
- openstackOpenstack Aodh can be used to launder Keystone trustsCVE-2017-12440Fix available7.5 High
- openstack computeOpenStack Compute (Nova) Improper Access ControlCVE-2015-2687Fix available4.7 Medium
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- openstack ironicOpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote...CVE-2015-7514Fix available6.5 Medium
- openstack magnumOpenstack Magnum Unsafe Credential HandlingCVE-2016-7404Fix available9.8 Critical
- openstack horizonOpenStack Horizon Cross-site Scripting (XSS)CVE-2017-7400Fix available4.8 Medium
- openstack glanceOpenStack Glance Signature Verification BypassCVE-2015-82345.5 Medium
- openstack oslo.middleware, unspecified python-oslo-middleware, canonical ubuntu linux +2 moreoslo.middleware Information Disclosure vulnerabilityCVE-2017-2592Fix available5.9 Medium
- Show moreLoading…