Openstack Cloud vulnerabilities

4 known vulnerabilities in Openstack Cloud from SUSE. 2 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Cifs-utils: Out-of-bounds Write

  CVE-2022-27239Apr 27, 2022Samba

  In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

• 5.5 Medium severity

  ImageMagick Server-Side Request Forgery (SSRF) Exploited

  CVE-2016-3718May 5, 2016Red HatEPSS 75.6%

  The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

• 5.5 Medium severity

  ImageMagick Arbitrary File Deletion Exploited

  CVE-2016-3715May 5, 2016Red HatEPSS 75.3%

  The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

• 9.8 Critical severity

  Oracle Java SE and JRockit Unspecified Exploited

  CVE-2016-3427Apr 21, 2016OracleEPSS 92.3%

  Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.