DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack: Mehrere Schwachstellen
view advisory published 2024-05-22
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, eine Denial-of-Service-Zustand zu erzeugen, um vertrauliche Informationen offenzulegen und Daten zu ändern.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6110US | — | — | ||
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any applic… | ||||
| CVE-2024-4438US | — | — | ||
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd p… | ||||
| CVE-2024-1135US | — | — | ||
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding head… | ||||
| CVE-2023-45288US | — | Exploit | ||
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing an… | ||||
| CVE-2024-1394US | — | — | ||
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory… | ||||
| CVE-2023-6725US | — | — | ||
An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A m… | ||||
| CVE-2024-24680US | high7.5 | — | ||
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attac… | ||||
| CVE-2024-1141US | medium5.5 | — | ||
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled. | ||||
| CVE-2024-22195US | medium6.1 | — | ||
Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into… | ||||
| CVE-2023-48795US | medium5.9OT high | Exploit | ||
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet… | ||||
| CVE-2023-39326US | medium5.3 | — | ||
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malici… | ||||
| CVE-2023-45287US | high7.5 | — | ||
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this m… | ||||
| CVE-2023-45803US | medium4.2 | — | ||
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 aft… | ||||
| CVE-2023-39325US | high7.5 | Exploit | ||
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded… | ||||
| CVE-2023-44487US | high7.5OT critical | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:10142 vom 2024-11-26external
- Red Hat Security Advisory RHSA-2024:2727 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2729 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2730 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2731 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2732 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2733 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:2734 vom 2024-05-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan