DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack: Mehrere Schwachstellen
view advisory published 2022-12-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3637US | medium6.5 | — | ||
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. Th… | ||||
| CVE-2022-3277US | medium6.5 | — | ||
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. Th… | ||||
| CVE-2022-37026US | critical9.8 | — | ||
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and D… | ||||
| CVE-2022-2996US | high7.4 | — | ||
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to po… | ||||
| CVE-2022-31117US | medium5.9 | — | ||
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string d… | ||||
| CVE-2022-31116US | high7.5 | — | ||
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings tha… | ||||
| CVE-2022-28346US | critical9.8 | Exploit | ||
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in… | ||||
| CVE-2022-23833US | high7.5 | — | ||
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infini… | ||||
| CVE-2022-22818US | medium6.1 | Exploit | ||
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS. | ||||
| CVE-2021-27025US | medium6.5 | — | ||
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan