rpm package
suse/ardana-cobbler&distro=SUSE OpenStack Cloud 9
pkg:rpm/suse/ardana-cobbler&distro=SUSE%20OpenStack%20Cloud%209
Vulnerabilities (53)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-12052 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Apr 27, 2020 | Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | ||
| CVE-2018-17954 | — | < 9.0+git.1574950066.a3c4be4-3.10.1 | 9.0+git.1574950066.a3c4be4-3.10.1 | Apr 3, 2020 | An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue a | ||
| CVE-2020-9402 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Mar 5, 2020 | Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possibl | ||
| CVE-2020-1734 | — | < 9.0+git.1660747489.119efcd-3.19.1 | 9.0+git.1660747489.119efcd-3.19.1 | Mar 3, 2020 | A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitr | ||
| CVE-2020-7471 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Feb 3, 2020 | Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitabl | ||
| CVE-2019-16792 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Jan 22, 2020 | Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally. | ||
| CVE-2019-19911 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Jan 5, 2020 | There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. Ho | ||
| CVE-2020-5311 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Jan 3, 2020 | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. | ||
| CVE-2020-5312 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Jan 3, 2020 | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. | ||
| CVE-2020-5313 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Jan 3, 2020 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. | ||
| CVE-2019-16789 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Dec 26, 2019 | In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain | ||
| CVE-2019-16785 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Dec 20, 2019 | Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if | ||
| CVE-2019-16786 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Dec 20, 2019 | Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ | ||
| CVE-2019-19844 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Dec 18, 2019 | Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token fo | ||
| CVE-2019-16770 | — | < 9.0+git.1574950066.a3c4be4-3.10.1 | 9.0+git.1574950066.a3c4be4-3.10.1 | Dec 5, 2019 | In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait p | ||
| CVE-2019-11287 | — | < 9.0+git.1660747489.119efcd-3.19.1 | 9.0+git.1660747489.119efcd-3.19.1 | Nov 22, 2019 | Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP | ||
| CVE-2019-16865 | — | < 9.0+git.1588181228.bae3b1f-3.13.2 | 9.0+git.1588181228.bae3b1f-3.13.2 | Oct 4, 2019 | An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image. | ||
| CVE-2018-11779 | — | < 9.0+git.1588258487.3acf8ad-3.16.2 | 9.0+git.1588258487.3acf8ad-3.16.2 | Jul 25, 2019 | In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class. | ||
| CVE-2019-0202 | — | < 9.0+git.1588258487.3acf8ad-3.16.2 | 9.0+git.1588258487.3acf8ad-3.16.2 | Jul 25, 2019 | The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpo | ||
| CVE-2019-13611 | — | < 9.0+git.1566336494.93967dd-3.7.2 | 9.0+git.1566336494.93967dd-3.7.2 | Jul 15, 2019 | An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted. |
- CVE-2020-12052Apr 27, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
- CVE-2018-17954Apr 3, 2020affected < 9.0+git.1574950066.a3c4be4-3.10.1fixed 9.0+git.1574950066.a3c4be4-3.10.1
An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue a
- CVE-2020-9402Mar 5, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possibl
- CVE-2020-1734Mar 3, 2020affected < 9.0+git.1660747489.119efcd-3.19.1fixed 9.0+git.1660747489.119efcd-3.19.1
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitr
- CVE-2020-7471Feb 3, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitabl
- CVE-2019-16792Jan 22, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally.
- CVE-2019-19911Jan 5, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. Ho
- CVE-2020-5311Jan 3, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
- CVE-2020-5312Jan 3, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
- CVE-2020-5313Jan 3, 2020affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
- CVE-2019-16789Dec 26, 2019affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain
- CVE-2019-16785Dec 20, 2019affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if
- CVE-2019-16786Dec 20, 2019affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ
- CVE-2019-19844Dec 18, 2019affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token fo
- CVE-2019-16770Dec 5, 2019affected < 9.0+git.1574950066.a3c4be4-3.10.1fixed 9.0+git.1574950066.a3c4be4-3.10.1
In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait p
- CVE-2019-11287Nov 22, 2019affected < 9.0+git.1660747489.119efcd-3.19.1fixed 9.0+git.1660747489.119efcd-3.19.1
Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP
- CVE-2019-16865Oct 4, 2019affected < 9.0+git.1588181228.bae3b1f-3.13.2fixed 9.0+git.1588181228.bae3b1f-3.13.2
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
- CVE-2018-11779Jul 25, 2019affected < 9.0+git.1588258487.3acf8ad-3.16.2fixed 9.0+git.1588258487.3acf8ad-3.16.2
In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.
- CVE-2019-0202Jul 25, 2019affected < 9.0+git.1588258487.3acf8ad-3.16.2fixed 9.0+git.1588258487.3acf8ad-3.16.2
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpo
- CVE-2019-13611Jul 15, 2019affected < 9.0+git.1566336494.93967dd-3.7.2fixed 9.0+git.1566336494.93967dd-3.7.2
An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted.
Page 2 of 3