HP Helion Openstack vulnerabilities

5 CVEs affecting HP Helion Openstack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27239, published 2022-04-27.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7547, published 2016-02-18. High severity, CVSS 8.1. EPSS: 91% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a…
• CVE-2016-2107, published 2016-05-05. Medium severity, CVSS 5.9. EPSS: 89.1% chance of exploitation in the next 30 days. The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive…
• CVE-2019-3683, published 2020-01-17. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full…
• CVE-2016-3710, published 2016-05-11. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes…
• CVE-2022-27239, published 2022-04-27. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.