Red Hat Enterprise Linux Openstack Platform vulnerabilities

4 CVEs affecting Red Hat Enterprise Linux Openstack Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0148, published 2022-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-5694, published 2019-11-22. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. Designate does not enforce the DNS protocol limit concerning record set sizes
CVE-2014-0144, published 2022-09-29. High severity, CVSS 8.6. EPSS: 1% chance of exploitation in the next 30 days. QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input…
CVE-2014-0147, published 2022-09-29. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while…
CVE-2014-0148, published 2022-09-29. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and…