Skip to contentRedhat Openstack vulnerabilities
- openstack horizon, redhat openstack, debian linux +2 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerabilityCVE-2016-4428Fix available5.4 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...CVE-2016-5126Fix available7.8 High
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- openstack tripleo heat templates, redhat openstack +1 moreTripleO Heat templates might allow remote attackers to obtain sensitive information from private containersCVE-2015-5271Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- redhat openstackThe TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...CVE-2015-53297.3 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- openstack orchestration api, redhat openstack, fedoraproject fedora +1 more +3 moreThe template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5...CVE-2015-5295Fix available5.4 Medium
- qemu, oracle linux, redhat openstack +2 moreThe (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when...CVE-2016-1714Fix available8.1 High
- qemu, debian linux, redhat openstack +1 more +3 moreUse-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support...CVE-2016-1568Fix available8.8 High
- redislabs redis, debian linux, opensuse leap +2 more +4 moreInteger overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x...CVE-2015-8080Fix available7.5 High
- qemu, debian linux, redhat enterprise linux desktop +5 more +7 moreBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...CVE-2015-7512Fix available9.0 Critical
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- qemu, fedoraproject fedora, redhat openstack +2 moreBuffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU...CVE-2015-5225Fix available7.2 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 moreNokogiri is vulnerable to XML External Entity (XXE) attackCVE-2012-6685Fix available7.5 High
- snoopy, debian linux, redhat openstack +2 moreSnoopy allows remote attackers to execute arbitrary commands.CVE-2014-5008Fix available9.8 Critical
- snoopy, nagios, redhat openstack +2 moreThe _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE...CVE-2008-7313Fix available9.8 Critical
- redhat openstackThe puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a...CVE-2015-1842Fix available10.0 High
- redhat openstackThe log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard...CVE-2015-0271Fix available4.0 Medium
- theforeman foreman, redhat openstack +1 moreSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...CVE-2014-3691Fix available7.5 High
- redhat openstack, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance Bypass the storage quota and Denial of serviceCVE-2014-9623Fix available4.0 Medium
- redhat openstack, openstack image registry and delivery service \(glance\) +1 moreThe V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4...CVE-2014-9493Fix available5.5 Medium
- openstack neutron, redhat openstack, fedoraproject fedora +2 moreOpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users...CVE-2014-7821Fix available4.0 Medium
- openstack nova, redhat openstack +1 moreOpenStack Nova VMware instance leak potentially leading to compute DoSCVE-2014-8333Fix available4.0 Medium
- openstack nova, redhat openstack +1 moreOpenStack Compute (Nova) Denial of Service vulnerabilityCVE-2014-3708Fix available4.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- openstack cinder, nova, trove +1 more +3 moreOpenStack Oslo utility sensitive information exposure via log filesCVE-2014-7231Fix available2.1 Low
- openstack cinder, nova, trove +2 more +4 moreThe processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...CVE-2014-7230Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreOpenStack Identity Keystone Exposure of Sensitive InformationCVE-2014-3621Fix available4.0 Medium
- openstack neutron, oslo, pycadf +3 more +5 moreThe notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2...CVE-2014-4615Fix available5.0 Medium
- redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00424.3 Medium
- redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00414.3 Medium
- redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00404.3 Medium
- redhat openstackThe default configuration in the standalone controller quickstack manifest in openstack-foreman...CVE-2013-6470Fix available5.0 Medium
- redhat openstackPackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to...CVE-2014-0071Fix available6.4 Medium
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...CVE-2014-0147Fix available6.2 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...CVE-2014-0144Fix available8.6 High
- openstack oslo, redhat openstack +1 moreThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...CVE-2013-6491Fix available4.3 Medium
- pyyaml libyaml, canonical ubuntu linux, debian linux +3 more +5 moreHeap Based Buffer Overflow in libyamlCVE-2013-6393Fix available6.8 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreThe ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before...CVE-2013-6391Fix available5.8 Medium
- nagios, redhat openstack +1 morerss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1,...CVE-2013-42146.3 Medium
- redhat openstacknagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5...CVE-2013-20296.3 Medium
- theforeman foreman, redhat openstack +1 moreMultiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1...CVE-2013-4386Fix available7.5 High
- openstack folsom, grizzly, redhat openstack +2 moreOpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...CVE-2013-4261Fix available3.5 Low
- openstack compute, redhat openstack +1 moreOpenStack Nova Denial of Service in network source security groupsCVE-2013-4185Fix available4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3...CVE-2013-4222Fix available6.5 Medium
- theforeman foreman, redhat openstack +1 moreapp/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict...CVE-2013-41827.5 High
- Show moreLoading…