Openstack Cloud Magnum Orchestration vulnerabilities

2 CVEs affecting Openstack Cloud Magnum Orchestration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18017, published 2018-01-03.

More from Openstack.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
• CVE-2017-1000366, published 2017-06-19. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note…