Red Hat Packstack vulnerabilities

2 CVEs affecting Red Hat Packstack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3703, published 2014-12-02.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3703, published 2014-12-02. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf…
• CVE-2013-1815, published 2013-04-10. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current…