redhat openshift virtualization 2 vulnerabilities and exploits

(subscribe to this query)

7

CVSSv3

An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2....

Nmstate Kubernetes-nmstate Redhat Openshift Virtualization 2

8.2

CVSSv3

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols ...

Cloudbase Open Vswitch 3.1.0 Cloudbase Open Vswitch Debian Debian Linux 11.0 Redhat Virtualization 4.0 Redhat Openshift Container Platform 4.0 Redhat Openstack Platform 16.1 Redhat Openstack Platform 16.2 Redhat Openstack Platform 17.0 Redhat Fast Datapath -

7

CVSSv3

libffi requests an executable stack allowing malicious users to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears ...

Redhat Enterprise Virtualization Server -Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Openshift 2.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Libffi Project Libffi Oracle Peopletools 8.57 Oracle Peopletools 8.56

9.8

CVSSv3

Python 2.7.x up to and including 2.7.16 and 3.x up to and including 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given ...

1 Article

7.5

CVSSv3

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...

20 Github repositories

8.8

CVSSv3

In Sudo prior to 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER=...

59 Github repositories1 Article

5.5

CVSSv3

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve ...

Shadow-maint Shadow-utils Redhat Enterprise Linux 8.0 Redhat Codeready Linux Builder 8.0 Redhat Enterprise Linux 9.0 Redhat Enterprise Linux For Arm 64 9.0 Redhat Enterprise Linux For Arm 64 8.0 Redhat Codeready Linux Builder For Ibm Z Systems 9.0 S390x Redhat Codeready Linux Builder For Arm64 9.0 Aarch64 Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64le Redhat Enterprise Linux For Ibm Z Systems 8.0 S390x Redhat Codeready Linux Builder For Power Little Endian 9.0 Ppc64le Redhat Codeready Linux Builder 9.0 Redhat Enterprise Linux For Power Little Endian 9.0 Ppc64le Redhat Enterprise Linux For Ibm Z Systems 9.0 S390x Redhat Codeready Linux Builder For Ibm Z Systems 8.0 S390x Redhat Codeready Linux Builder For Arm64 8.0 Aarch64 Redhat Codeready Linux Builder For Power Little Endian 8.0 Ppc64le

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook