Red Hat Storage vulnerabilities

31 CVEs affecting Red Hat Storage, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48795, published 2023-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0160: OpenSSL Information Disclosure Vulnerability, published 2014-04-07. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-04. EPSS: 100% chance of exploitation in the next 30 days. The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process…
CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability, published 2012-05-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 100% chance of exploitation in the next 30 days. sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which…
CVE-2014-0224, published 2014-06-05. High severity, CVSS 7.4. EPSS: 95.3% chance of exploitation in the next 30 days. OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a…
CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2014-0221, published 2014-06-05. Medium severity, CVSS 4.3. EPSS: 87.9% chance of exploitation in the next 30 days. The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client…
CVE-2014-3470, published 2014-06-05. Medium severity, CVSS 4.3. EPSS: 85.8% chance of exploitation in the next 30 days. The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers…
CVE-2012-0053, published 2012-01-28. Medium severity, CVSS 4.3. EPSS: 82.2% chance of exploitation in the next 30 days. protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to…
CVE-2022-26148, published 2022-03-21. Critical severity, CVSS 9.8. EPSS: 52.5% chance of exploitation in the next 30 days. An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to…
CVE-2012-0037, published 2012-06-17. Medium severity, CVSS 6.5. EPSS: 13.7% chance of exploitation in the next 30 days. Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read…
CVE-2012-4406, published 2012-10-22. Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days. OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute…

Latest

CVE-2023-42669, published 2023-11-06. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be…
CVE-2023-3961, published 2023-11-03. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect…
CVE-2023-4091, published 2023-11-03. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with…
CVE-2023-3347, published 2023-07-20. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain…
CVE-2023-34968, published 2023-07-20. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search…
CVE-2022-2447, published 2022-09-01. Medium severity, CVSS 6.6. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could…
CVE-2021-3670, published 2022-08-23. Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days. MaxQueryDuration not honoured in Samba AD DC LDAP
CVE-2021-44141, published 2022-02-21. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under…