Skip to contentRedhat Openstack vulnerabilities
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreImproper Verification of Cryptographic Signature in ansibleCVE-2020-14365Fix available7.1 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...CVE-2020-14364Public exploitFix available5.0 Medium
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- redhat openstack platformA flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16,...CVE-2020-10731Fix available9.9 Critical
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- hibernate orm, quarkus, redhat build of quarkus +7 more +9 moreSQL Injection in Hibernate ORMCVE-2019-14900Public exploitFix available6.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- [unknown] openstack-mistralOpenStack Mistral DoSCVE-2018-16848Fix available6.5 Medium
- red hat openstack-cinder, canonical ubuntu linux +1 moreOpenstack cinder Improper handling of ScaleIO backend credentialsCVE-2020-10755Fix available6.5 Medium
- keycloak, redhat openstack +1 moreImproper Certificate Validation and Improper Validation of Certificate with Host Mismatch in KeycloakCVE-2020-1758Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft softwareCVE-2020-10711Fix available5.9 Medium
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10685Fix available5.0 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...CVE-2020-1759Fix available6.4 Medium
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in AnsibleCVE-2020-10684Fix available7.9 High
- red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 moreArgument Injection in AnsibleCVE-2020-1738Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in AnsibleCVE-2020-1735Fix available4.2 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 moreIncorrect Permission Assignment for Critical Resource in AnsibleCVE-2020-1736Fix available2.2 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1739Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...CVE-2020-1711Fix available7.7 High
- golang go, redhat enterprise linux, openstack +2 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...CVE-2015-57419.8 Critical
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- openstack horizon, python-django-horizon, redhat openstack +2 more +4 moreThe file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS...CVE-2012-5474Fix available5.5 Medium
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling in Waitress: Invalid whitespace characters in headersCVE-2019-16789Fix available7.1 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: LF vs CRLF handling in WaitressCVE-2019-16785Fix available7.1 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: Invalid Transfer-Encoding in WaitressCVE-2019-16786Fix available7.1 High
- openstack python-keystoneclient, debian linux, redhat openstack +2 moreInsufficient Verification of Data Authenticity in python-keystoneclientCVE-2013-2167Fix available9.8 Critical
- openstack python-keystoneclient, debian linux, fedoraproject fedora +1 more +3 moreInadequate Encryption Strength in python-keystoneclientCVE-2013-2166Fix available9.8 Critical
- redhat openstack, openstack-utils openstack-db program, redhat openstack essex +2 moreopenstack-utils openstack-db has insecure password creationCVE-2013-17937.5 High
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-14856Fix available6.4 Medium
- pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 moreRabbitMQ Web Management Plugin DoS via heap overflowCVE-2019-11287Public exploitFix available4.5 Medium
- pivotal rabbitmq, broadcom rabbitmq server, pivotal rabbitmq for pivotal platform +1 more +3 moreRabbitMQ XSS attack via federation and shovel endpointsCVE-2019-11291Fix available3.1 Low
- openstack designate, debian linux, redhat enterprise linux openstack platform +2 moreDesignate does not enforce the DNS protocol limit concerning record set sizesCVE-2015-5694Fix available6.5 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...CVE-2019-14818Fix available7.5 High
- [unknown] openstack-mistralAn information-exposure vulnerability was discovered where openstack-mistral's undercloud log...CVE-2019-3866Fix available5.9 Medium
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML entitiesCVE-2013-6461Fix available6.5 Medium
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML documentsCVE-2013-6460Fix available6.5 Medium
- openstack compute, keystone, redhat openstack +1 more +3 moreOpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255Fix available5.9 Medium
- qemu, debian linux, fedoraproject fedora +2 more +4 moreThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...CVE-2019-120676.5 Medium
- pivotal rabbitmq, rabbitmq for pcf, debian linux +3 more +5 moreRabbitMQ XSS attackCVE-2019-11281Fix available2.4 Low
- python-ecdsa project python-ecdsa, redhat ceph storage, openstack +1 more +3 moreImproper Verification of Cryptographic Signature in Pure-Python ECDSACVE-2019-14859Fix available7.4 High
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- novnc, canonical ubuntu linux, debian linux +1 more +3 moreCross-Site Scripting in @novnc/novncCVE-2017-18635Public exploitFix available6.1 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Nova Server Resource Faults Leak External Exception DetailsCVE-2019-14433Fix available6.5 Medium
- jolokia, redhat openstack +1 moreCross-Site Request Forgery in JolokiaCVE-2018-10899Fix available8.1 High
- openstack ironic-inspector, redhat openstack, openstack-ironic-inspector +2 moreOpenstack ironic-inspector has SQL injection vulnerability in node_cacheCVE-2019-10141Fix available8.3 High
- red hat ansible, debian linux, redhat openstack +2 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156Fix available4.6 Medium
- Show moreLoading…