WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product openstack✕
Overview 28 matches · 1 in Waratek scope · 1 protected · 2 exploited · 1 CISA KEV · 2 public PoC · 4 EPSS ≥ 0.5
28matches 1in Waratek scope3.6% 1protected3.6% 2exploited7.1% 1CISA KEV3.6% 2public PoC7.1% 4EPSS ≥ 0.514.3%
Protected by Waratek 1 3.6% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 3.6% Not applicable 26 92.9% Withdrawn CVE 0 0.0%
Critical 28 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 3.6% partly blocked 0 0.0% not blocked 27 96.4% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 7.1% Working exploit published 1 3.6% Proof of concept only 0 0.0% Forecast only 1 3.6% No public exploit 24 85.7%
split by peak 6 / quarter
Not applicable: 26Outside Waratek scope: 1Protected by Waratek: 1 Critical: 28 not blocked: 27blocked by ARMR today: 1 No public exploit: 24Forecast only: 1Working exploit published: 1Exploited: 2
Q1 161 Not applicable1 Critical1 not blocked1 No public exploit1 Q2 163 Protected by Waratek1 Not applicable2 Critical3 blocked by ARMR today1 not blocked2 Exploited1 No public exploit2 Q3 161 Not applicable1 Critical1 not blocked1 Exploited1 Q4 161 Not applicable1 Critical1 not blocked1 No public exploit1 Q1 173 Not applicable3 Critical3 not blocked3 No public exploit3 Q2 171 Not applicable1 Critical1 not blocked1 No public exploit1 Q3 170 Q4 171 Not applicable1 Critical1 not blocked1 No public exploit1 Q1 181 Not applicable1 Critical1 not blocked1 Forecast only1 Q2 182 Outside Waratek scope1 Not applicable1 Critical2 not blocked2 Working exploit published1 No public exploit1 Q3 186 Not applicable6 Critical6 not blocked6 No public exploit6 Q4 181 Not applicable1 Critical1 not blocked1 No public exploit1 Q1 190 Q2 190 Q3 191 Not applicable1 Critical1 not blocked1 No public exploit1 Q4 192 Not applicable2 Critical2 not blocked2 No public exploit2 Q1 202 Not applicable2 Critical2 not blocked2 No public exploit2 Q2 201 Not applicable1 Critical1 not blocked1 No public exploit1 Q3 201 Not applicable1 Critical1 not blocked1 No public exploit1
Q1 16Q3 16Q1 17Q3 17Q1 18Q3 18Q1 19Q3 19Q1 20Q3 20
28 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2020-10731 Critical 2020-07-31 Not applicable No public exploit A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.
CVE-2018-17954 Critical 2020-04-03 Not applicable No public exploit An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.
CVE-2015-5741 Critical 2020-02-08 Not applicable No public exploit The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields.
CVE-2019-14859 Critical 2020-01-02 Not applicable No public exploit A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.
CVE-2013-2167 Critical 2019-12-10 Not applicable No public exploit python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
CVE-2013-2166 Critical 2019-12-10 Not applicable No public exploit python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass
CVE-2019-10141 Critical 2019-07-30 Not applicable No public exploit A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.
CVE-2018-17963 Critical 2018-10-09 Not applicable No public exploit qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVE-2018-14620 Critical 2018-09-10 Not applicable No public exploit The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
CVE-2017-2620 Critical 2018-07-27 Not applicable No public exploit Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
CVE-2016-9603 Critical 2018-07-27 Not applicable No public exploit A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
CVE-2017-2637 Critical 2018-07-26 Not applicable No public exploit A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host.
CVE-2017-7481 Critical 2018-07-19 Not applicable No public exploit Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
CVE-2017-2615 Critical 2018-07-03 Not applicable No public exploit Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVE-2018-11219 Critical 2018-06-17 Not applicable No public exploit An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.
CVE-2018-11218 Critical 2018-06-17 Outside Waratek scope Working exploit published Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.
CVE-2017-18017 Critical 2018-01-03 Not applicable Forecast only The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
CVE-2017-10906 Critical 2017-12-08 Not applicable No public exploit Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
CVE-2017-9214 Critical 2017-05-23 Not applicable No public exploit In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
CVE-2014-5009 Critical 2017-03-31 Not applicable No public exploit Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
CVE-2014-5008 Critical 2017-03-31 Not applicable No public exploit Snoopy allows remote attackers to execute arbitrary commands.
CVE-2008-7313 Critical 2017-03-31 Not applicable No public exploit The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
CVE-2016-6829 Critical 2016-12-09 Not applicable No public exploit The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVE-2016-6662 Critical 2016-09-20 Not applicable Exploited Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-2324 Critical 2016-04-08 Not applicable No public exploit Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
CVE-2016-2315 Critical 2016-04-08 Not applicable No public exploit revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVE-2015-7512 Critical 2016-01-08 Not applicable No public exploit Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.