Skip to contentRedhat Openstack vulnerabilities
- redis, canonical ubuntu linux, debian linux +6 more +8 moreA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions...CVE-2019-10193Fix availableEPSS 23.3%7.2 High
- redis, canonical ubuntu linux, debian linux +7 more +9 moreA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3...CVE-2019-10192Fix availableEPSS 25.6%7.2 High
- openstack octavia, redhat openstack, red hat openstack-tripleo-common +2 moreOpenstack Octavia Access Control VulnerabilityCVE-2019-3895Fix available5.5 Medium
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 High
- openstack neutron, redhat openstack +1 moreOpenStack Neutron overlapping security group rules prevents compute node network configurationCVE-2019-10876Fix available6.5 Medium
- openstack ceilometer, [unknown] openstack-ceilometer, redhat openstack +2 moreCeilometer Prints Sensitive Configuration Data to LogCVE-2019-3830Fix available4.0 Medium
- [unknown] openstack-octavia, openstack octavia, redhat openstack +2 moreOpenstack Octavia allows Insertion of Sensitive Information into Log FileCVE-2018-16856Fix available5.5 Medium
- openstack neutron, redhat openstack, debian linux +2 moreOpenStack Neutron's unsupported dport option prevents applying security groupsCVE-2019-9735Fix available6.5 Medium
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- [unknown] openstack-mistralopenstack-mistral Discloses the presence of arbitrary files within the filesystemCVE-2018-16849Fix available3.1 Low
- [unknown] redis, redhat openstack +1 moreA permissions flaw was found in redis, which sets weak permissions on certain files and...CVE-2016-2121Fix available4.0 Medium
- qemu, redhat enterprise linux, openstack +2 moreQemu has integer overflows because IOReadHandler and its associated functions use a signed...CVE-2018-18438Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...CVE-2018-17963Fix available9.8 Critical
- pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePyopenssl Incorrect Memory ManagementCVE-2018-1000808Fix available5.9 Medium
- pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 morePyOpenSSL Use-After-Free vulnerabilityCVE-2018-1000807Fix available8.1 High
- canonical ubuntu linux, debian linux, openvswitch +1 more +3 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function...CVE-2018-17206Fix available4.9 Medium
- canonical ubuntu linux, openvswitch, redhat openstack +2 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...CVE-2018-17205Fix available7.5 High
- canonical ubuntu linux, debian linux, openvswitch +1 more +3 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...CVE-2018-17204Fix available4.3 Medium
- openstack neutron, redhat openstack, the openstack project openstack-neutron +2 moreOpensStack Neutron Denial of Service VulnerabilityCVE-2018-14635Fix available6.5 Medium
- red hat openstack-rabbitmq-container, redhat openstack +1 moreThe OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over...CVE-2018-146204.7 Medium
- openstack cinder, openstack foundation openstack-cinder, redhat openstack +2 moreA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...CVE-2017-15139Fix available5.1 Medium
- openstack tripleo-common, red hat openstack-tripleo-common, redhat openstack +2 moreA flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and...CVE-2017-26278.2 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- openstack keystone, redhat openstack, debian linux +2 moreIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...CVE-2018-14432Fix available5.3 Medium
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreA vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When...CVE-2018-10898Fix available8.8 High
- openstack heat, redhat openstack, red hat openstack-heat +2 moreAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1...CVE-2017-2621Fix available5.9 Medium
- redhat openstack, [unknown] openstack-mistral +1 moreAn accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log...CVE-2017-2622Fix available5.9 Medium
- openstack neutron, red hat openstack-neutron, redhat openstack +2 moreOpenStack Neutron Race Condition vulnerabilityCVE-2017-7543Fix available5.3 Medium
- qemu, redhat openstack, virtualization +2 moreAn assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...CVE-2017-7539Fix available5.3 Medium
- redhat openstack, [unknown] rhosp-director +1 moreA design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable...CVE-2017-2637Fix available9.9 Critical
- [unknown] python-cryptography, canonical ubuntu linux, redhat openstack +2 morePyCA Cryptography vulnerable to GCM tag forgeryCVE-2018-10903Fix available7.5 High
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- [unknown] docker, mobyproject moby, opensuse leap +3 more +5 moreThe default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does...CVE-2018-10892Fix available6.3 Medium
- [unknown] ansible, redhat ansible engine, openstack +2 more +4 moreAnsible Improper Input Validation vulnerabilityCVE-2018-10874Fix available7.8 High
- [unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 moreAnsible exposes sensitive data in log files and on the terminalCVE-2018-10855Fix available5.9 Medium
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis...CVE-2018-11219Fix available9.8 Critical
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreMemory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2...CVE-2018-11218Public exploitFix availableEPSS 58.8%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google GuavaCVE-2018-10237Fix available5.9 Medium
- openstack puppet-swift, redhat openstack +1 morepuppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat...CVE-2016-9590Fix available6.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- openstack puppet-tripleo, redhat openstack +1 morepuppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the...CVE-2016-9599Fix available7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2819Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2817Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2813Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2781Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking)....CVE-2018-2771Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-2761Fix available5.9 Medium
- Show moreLoading…