Search vulnerabilities

Expected end of text, found '\u200b' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,803

CVE-2016-9602

Qemu: 9p: virtfs allows guest to access host filesystem

Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

CVSS 3.0 · 7.6 High EPSS 3.6% KEV · Not listed
Vendors
Debian Qemu
Products
Debian Linux Qemu
CVE-2016-9601

ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.

CVSS 3.0 · 5.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Artifex Debian
Products
Gpl Ghostscript Jbig2dec Debian Linux
CVE-2016-9600

jasper: JP2 encoder NULL pointer dereference due to uninitialized cmprof_

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Jasper Project Redhat
Products
Ubuntu Linux Jasper Enterprise Linux and 6 more
CVE-2016-9599

puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Puppet-tripleo Openstack
CVE-2016-9598

libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)

libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Jboss Core Services Libxml2
CVE-2016-9597

libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS)

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Canonical Debian Hp and 3 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 4 more
CVE-2016-9596

libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)

libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Jboss Core Services Libxml2
CVE-2016-9595

katello-debug: Possible symlink attacks due to use of predictable file names

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Katello
CVE-2016-9593

foreman-debug: missing obfuscation of sensitive information

foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2016-9592

openshift: Failing to detach a volume causes DoS by retrying to perform delete

openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2016-9590

puppet-swift: installs config file with world readable permissions

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Puppet-swift Openstack
CVE-2016-9589

wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform Jboss Single Sign On Jboss Wildfly Application Server and 1 more
CVE-2016-9587

Ansible: Compromised remote hosts can lead to running commands on the Ansible controller

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.1 · 8.1 High EPSS 17.0% KEV · Not listed
Vendors
Ansible Redhat
Products
Ansible Ansible Openshift and 4 more
CVE-2016-9585

EAP-5: unsafe deserialization of user credentials by the JMX endpoint

Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passed to it. An attacker could exploit this vulnerability resulting in a denial of service attack.

CVSS 3.0 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform
CVE-2016-9581

openjpeg2: Infinite loop in tiftoimage resulting into heap buffer overflow in convert_32s_C1P1

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.

CVSS 3.0 · 3.3 Low EPSS 1.9% KEV · Not listed
Vendors
Uclouvain
Products
Openjpeg
CVE-2016-9580

openjpeg2: Integer overflow in tiftoimage causes heap buffer overflow

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

CVSS 3.0 · 3.3 Low EPSS 2.0% KEV · Not listed
Vendors
Uclouvain
Products
Openjpeg
CVE-2016-9579

ceph: Object Gateway server DoS by sending invalid cross-origin HTTP request

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

CVSS 3.0 · 6.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Canonical Redhat
Products
Ubuntu Linux Ceph Storage Ceph Storage Mon and 5 more