DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack Platform : Mehrere Schwachstellen
view advisory published 2023-06-05
Ein Angreifer kann mehrere Schwachstellen in der Red Hat OpenStack Platform ausnutzen, um seine Privilegien zu erhöhen, einen Denial of Service zu verursachen oder Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32082US | medium4.3 | — | ||
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) assoc… | ||||
| CVE-2023-30861US | high7.5 | Exploit | ||
Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequent… | ||||
| CVE-2023-24536US | high7.5 | — | ||
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multi… | ||||
| CVE-2023-24534US | high7.5 | — | ||
HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input dat… | ||||
| CVE-2021-28235US | critical9.8 | Exploit | ||
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2023-06-05external
- RedHat Security Advisory vom 2023-06-05external
- RedHat Security Advisory vom 2023-06-05external
- RedHat Security Advisory vom 2023-06-05external
- RedHat Security Advisory vom 2023-06-05external
- Red Hat Security Advisory RHSA-2023:3525 vom 2023-06-07external
- Red Hat Security Advisory RHSA-2023:3536 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3545 vom 2023-06-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan