redhat openstack 15 vulnerabilities and exploits

(subscribe to this query)

6.4

CVSSv2

A flaw was found in all python-ecdsa versions prior to 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker coul...

Python-ecdsa Project Python-ecdsa Redhat Ceph Storage 2.0 Redhat Ceph Storage 3.0 Redhat Openstack 10 Redhat Openstack 13 Redhat Openstack 14 Redhat Openstack 15 Redhat Virtualization 4.0

3.5

CVSSv2

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x before 1.15.13, versions 1.16.x before 1.16.6, and versions 1.17.x before 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanit...

Pivotal Software Rabbitmq Debian Debian Linux 9.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15 Redhat Openstack For Ibm Power 15

1.9

CVSSv2

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x prior to 2.7.17 and 2.8.x prior to 2.8.11 and 2.9.x prior to 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as ass...

Redhat Ansible Tower Redhat Ansible Engine Redhat Ceph Storage 3.0 Redhat Openstack 10 Redhat Ceph Storage 2.0 Redhat Storage 3.0 Redhat Openstack 13 Redhat Openstack 15 Debian Debian Linux 10.0

3.5

CVSSv2

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions before 1.16.7 and 1.17.x versions before 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated ...

Vmware Rabbitmq Vmware Rabbitmq 3.8.0 Redhat Openstack 15

5.8

CVSSv2

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability exists in the secure mode of the messenger v2 protocol, which can allow an malicious user to forge auth tags and potentially manipulate the data by l...

Redhat Openshift 4.2 Redhat Ceph Storage 4.0 Redhat Openstack 15 Linuxfoundation Ceph Fedoraproject Fedora 31

5

CVSSv2

Pivotal RabbitMQ, versions 3.7.x before 3.7.21 and 3.8.x before 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions before 1.16.7 and 1.17.x versions before 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HT...

Pivotal Software Rabbitmq Vmware Rabbitmq Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15 Debian Debian Linux 9.0

4.3

CVSSv2

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the ...

Redhat Ceph Storage 3.0 Redhat Ceph Storage 4.0 Redhat Openstack 15 Fedoraproject Fedora 32 Opensuse Leap 15.1 Linuxfoundation Ceph Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04

5

CVSSv2

Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ...

Agendaless Waitress Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Debian Debian Linux 9.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15

6.4

CVSSv2

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain...

Agendaless Waitress Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Debian Debian Linux 9.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15

5

CVSSv2

Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR.&quo...

Agendaless Waitress Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Debian Debian Linux 9.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Openstack 15

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook