DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat OpenStack: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-12-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3637US | medium6.5 | — | ||
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. Th… | ||||
| CVE-2022-3277US | medium6.5 | — | ||
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. Th… | ||||
| CVE-2022-37026US | critical9.8 | — | ||
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and D… | ||||
| CVE-2022-2996US | high7.4 | — | ||
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to po… | ||||
| CVE-2022-31117US | medium5.9 | — | ||
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string d… | ||||
| CVE-2022-31116US | high7.5 | — | ||
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings tha… | ||||
| CVE-2022-28346US | critical9.8 | Exploit | ||
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in… | ||||
| CVE-2022-23833US | high7.5 | — | ||
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infini… | ||||
| CVE-2022-22818US | medium6.1 | Exploit | ||
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS. | ||||
| CVE-2021-27025US | medium6.5 | — | ||
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
- RedHat Security Advisory vom 2022-12-07external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan