Known vulnerabilities in Red Hat OpenStack for IBM Power - page 6

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28395 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12127		 CWE-200 Low
No
No
 - 30.05.2019 SB2019053010
SB2019051422
SB2019072469
and 67 more
#VU28396 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12130		 CWE-200 Low
No
No
 - 30.05.2019 SB2019053011
SB2019051422
SB2019072469
and 67 more
#VU28398 - Exposure of sensitive information to an unauthorized actor
CVE-2019-11091		 CWE-200 Low
No
No
 - 30.05.2019 SB2019053013
SB2019051422
SB2019072469
and 67 more
#VU18105 - Exposure of sensitive information to an unauthorized actor
CVE-2019-3830		 CWE-200 Low
No
No
 - 01.04.2019 SB2019040103
SB2019043006
SB2019031412
and 1 more
#VU16629 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16876		 CWE-200 Low
No
No
 - 19.12.2018 SB2018122008
SB2019022302
SB2019031413
and 9 more
#VU16580 - Buffer over-read
CVE-2018-17206		 CWE-126 Low
No
No
 - 18.12.2018 SB2018121811
SB2019011611
SB2019011617
and 2 more
#VU16579 - Reachable Assertion
CVE-2018-17205		 CWE-617 Low
No
No
 - 18.12.2018 SB2018121811
SB2019011611
SB2019011617
and 2 more
#VU16578 - Reachable Assertion
CVE-2018-17204		 CWE-617 Low
No
No
 - 16.12.2018 SB2018121811
SB2019011611
SB2019011617
and 3 more
#VU16341 - Improper input validation
CVE-2018-14635		 CWE-20 Low
No
No
 - 07.12.2018 SB2018061413
SB2018120513
SB2018091706
and 1 more
#VU15931 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15139		 CWE-200 Low
No
No
 - 16.11.2018 SB2017062120
SB2018111902
SB2019043007
#VU15945 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10903		 CWE-200 Low
No
No
 - 16.11.2018 SB2018071715
SB2018111903
SB2018102518
and 3 more
#VU15784 - Use After Free
CVE-2018-1000807		 CWE-416 High
No
No
 - 09.11.2018 SB2017102904
SB2019040212
SB2019011615
and 3 more
#VU15783 - Resource exhaustion
CVE-2018-1000808		 CWE-400 Low
No
No
 - 08.11.2018 SB2017102904
SB2019040212
SB2019011615
and 2 more
#VU13401 - Buffer overflow
CVE-2018-12326		 CWE-120 Low
Available
No
 - 19.06.2018 SB2018062020
SB2019011612
SB2019011614
and 1 more
#VU13381 - Integer overflow
CVE-2018-11219		 CWE-190 Low
No
No
 - 18.06.2018 SB2018061804
SB2018062504
SB2018062506
and 5 more
#VU13380 - Stack-based buffer overflow
CVE-2018-11218		 CWE-121 Low
No
No
 - 17.06.2018 SB2018061804
SB2018062504
SB2018062506
and 5 more
#VU13375 - Heap-based Buffer Overflow
CVE-2018-11806		 CWE-122 Low
No
No
 - 16.06.2018 SB2018061802
SB2018080616
SB2018081714
and 9 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 - 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU11194 - Insufficient Control of Network Message Volume (Network Amplification)
CVE-2018-1000115		 CWE-406 Low
Available
No
 - 21.03.2018 SB2018030509
SB2018060712
SB2018082314
and 5 more
#VU10952 - Improper input validation
CVE-2018-7536		 CWE-20 Low
No
No
 - 13.03.2018 SB2018030605
SB2018030608
SB2018030609
and 12 more


Showing elements 101 - 120 out of 129