DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack: Mehrere Schwachstellen
view advisory published 2022-03-23
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0718US | medium4.9 | — | ||
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password… | ||||
| CVE-2021-4180US | medium4.3 | — | ||
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www… | ||||
| CVE-2022-21716US | high7.5 | — | ||
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount… | ||||
| CVE-2021-3654US | medium6.1 | — | ||
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL. | ||||
| CVE-2022-21712US | high7.5 | — | ||
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This i… | ||||
| CVE-2021-41496US | medium5.5 | — | ||
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an arra… | ||||
| CVE-2021-33430US | medium5.3 | — | ||
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, whi… | ||||
| CVE-2021-40797US | medium6.5 | — | ||
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent contro… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:0982 vom 2022-03-24external
- Red Hat Security Advisory RHSA-2022:0983 vom 2022-03-24external
- Red Hat Security Advisory RHSA-2022:0987 vom 2022-03-24external
- Red Hat Security Advisory RHSA-2022:0990 vom 2022-03-24external
- Red Hat Security Advisory vom 2022-03-23external
- Red Hat Security Advisory vom 2022-03-23external
- Red Hat Security Advisory vom 2022-03-23external
- Red Hat Security Advisory vom 2022-03-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan