Suse Cloud vulnerabilities

2 CVEs affecting Suse Cloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3476, published 2014-06-17.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4365, published 2013-10-17. High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified…
• CVE-2014-3476, published 2014-06-17. Medium severity, CVSS 6.0. EPSS: 2.3% chance of exploitation in the next 30 days. OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges…