Red Hat Openstack vulnerabilities

210 CVEs affecting Red Hat Openstack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2088, published 2023-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9490, published 2020-08-07. High severity, CVSS 7.5. EPSS: 88.8% chance of exploitation in the next 30 days. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a…
CVE-2018-1000115, published 2018-03-05. High severity, CVSS 7.5. EPSS: 88.1% chance of exploitation in the next 30 days. Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial…
CVE-2019-9515, published 2019-08-13. High severity, CVSS 7.5. EPSS: 87.4% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the…
CVE-2019-9514, published 2019-08-13. High severity, CVSS 7.5. EPSS: 82.8% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that…
CVE-2016-6662, published 2016-09-20. Critical severity, CVSS 9.8. EPSS: 67.7% chance of exploitation in the next 30 days. Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x…
CVE-2018-3639, published 2018-05-22. Medium severity, CVSS 5.5. EPSS: 60.6% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of…
CVE-2018-11218, published 2018-06-17. Critical severity, CVSS 9.8. EPSS: 59% chance of exploitation in the next 30 days. Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.
CVE-2019-10192, published 2019-07-11. High severity, CVSS 7.2. EPSS: 26% chance of exploitation in the next 30 days. A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using…
CVE-2013-2121, published 2013-07-31. Medium severity, CVSS 6.0. EPSS: 24.8% chance of exploitation in the next 30 days. Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary…
CVE-2019-10193, published 2019-07-11. High severity, CVSS 7.2. EPSS: 23.7% chance of exploitation in the next 30 days. A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the…

Latest

CVE-2023-2088, published 2023-05-12. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this…
CVE-2022-3146, published 2023-03-23. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute…
CVE-2022-3101, published 2023-03-23. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute…
CVE-2022-4134, published 2023-03-06. Low severity, CVSS 2.8. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
CVE-2022-3100, published 2023-01-18. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
CVE-2022-38065, published 2022-12-21. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within…
CVE-2022-1655, published 2022-07-22. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies…
CVE-2021-4180, published 2022-03-23. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri…
CVE-2021-3656, published 2022-03-04. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a…
CVE-2021-3620, published 2022-03-03. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest…