Attachment 241403 Details for Bug 270744 – 20 VuXML new entries for vulnerable ports

20 VuXML new entries for vulnerable ports

2023.xml (text/plain), 23.82 KB, created by Hubert Tournier on 2023-04-10 18:33:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Hubert Tournier

Created: 2023-04-10 18:33:13 UTC

Size: 23.82 KB

patch

obsolete

> <vuln vid="b54abe9d-7024-4d10-98b2-180cf1717766">
> <topic>py39-beaker -- arbitrary code execution vulnerability</topic>
> <affects>
> <package>
> <name>py39-beaker</name>
> <range><le>1.12.1</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> matheusbrat reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2020-216">
> The Beaker library through 1.12.1 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2013-7489</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2020-216</url>
> </references>
> <dates>
> <discovery>2020-06-26</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="374793ad-2720-4c4a-b86c-fc4a1780deac">
> <topic>py39-psutil121 -- double free vulnerability</topic>
> <affects>
> <package>
> <name>py39-psutil121</name>
> <range><lt>5.6.6</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> ret2libc reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2019-41">
> psutil (aka python-psutil) through 5.6.5 can have a double free.
> This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2019-18874</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2019-41</url>
> <url>https://osv.dev/vulnerability/GHSA-qfc5-mcwq-26q8</url>
> </references>
> <dates>
> <discovery>2019-11-12</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="e1b77733-a982-442e-8796-a200571bfcf2">
> <topic>py39-ansible -- multiple vulnerabilities</topic>
> <affects>
> <package>
> <name>py39-ansible</name>
> <range><le>7.2.0</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> abeluck reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2020-220">
> A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed.
> Files would remain in the bucket exposing the data.
> This issue affects directly data confidentiality.
> </blockquote>
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2020-221">
> A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers.
> Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes.
> This issue affects mainly the service availability.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2020-25635</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2020-220</url>
> <cvename>CVE-2020-25636</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2020-221</url>
> </references>
> <dates>
> <discovery>2020-10-05</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="f418cd50-561a-49a2-a133-965d03ede72a">
> <topic>py39-ansible -- data leak vulnerability</topic>
> <affects>
> <package>
> <name>py39-ansible</name>
> <range><le>7.1.0</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Tapas jena reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2021-125">
> A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory.
> Any secret information in an async status file will be readable by a malicious user on that system.
> This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2021-3532</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2021-125</url>
> </references>
> <dates>
> <discovery>2021-06-09</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="643086d4-b2e3-48e3-95cb-b8e30b1bd834">
> <topic>py39-pysaml24 -- XML Signature Wrapping (XSW) vulnerability</topic>
> <affects>
> <package>
> <name>py39-pysaml24</name>
> <range><lt>5.0.0</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Alexey Sintsov and Yuri Goltsev report:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2020-94">
> PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW).
> The signature information and the node/object that is signed can be in different places and thus the signature verification will succeed, but the wrong data will be used.
> This specifically affects the verification of assertion that have been signed.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2020-5390</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2020-94</url>
> <url>https://osv.dev/vulnerability/GHSA-qf7v-8hj3-4xw7</url>
> </references>
> <dates>
> <discovery>2020-01-13</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="d2d6996a-ea5b-4c41-873f-bf514d44517d">
> <topic>py39-pysaml24 -- improper verification of cryptographic signature vulnerabilities</topic>
> <affects>
> <package>
> <name>py39-pysaml24</name>
> <range><lt>6.5.0</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Victor SchoÌnfelder Garcia, Juraj Somorovsky and Vladislav Mladenov report:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2021-48">
> PySAML2 is a pure python implementation of SAML Version 2 Standard.
> PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability.
> All users of pysaml2 that need to validate signed SAML documents are impacted.
> The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema.
> This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature.
> </blockquote>
> Brian Wolff reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-5p3x-r448-pc62">
> All users of pysaml2 that use the default `CryptoBackendXmlSec1` backend and need to verify signed SAML documents are impacted.
> `pysaml2 &lt;= 6.4.1` does not ensure that a signed SAML document is correctly signed.
> The default `CryptoBackendXmlSec1` backend is using the `xmlsec1` binary to verify the signature of signed SAML documents, but by default, `xmlsec1` accepts any type of key found within the given document.
> `xmlsec1` needs to be configured explicitly to only use only _x509 certificates_ for the verification process of the SAML document signature.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2021-21238</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2021-48</url>
> <url>https://osv.dev/vulnerability/GHSA-f4g9-h89h-jgv9</url>
> <cvename>CVE-2021-21239</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2021-49</url>
> <url>https://osv.dev/vulnerability/GHSA-5p3x-r448-pc62</url>
> </references>
> <dates>
> <discovery>2021-01-21</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="2acdf364-9f8d-4aaf-8d1b-867fdfd771c6">
> <topic>py39-kerberos -- DoS and MitM vulnerabilities</topic>
> <affects>
> <package>
> <name>py39-kerberos</name>
> <range><le>1.3.1</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> macosforgebot reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2017-49">
> The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2015-3206</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2017-49</url>
> </references>
> <dates>
> <discovery>2017-08-25</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="c1a8ed1c-2814-4260-82aa-9e37c83aac93">
> <topic>py39-cryptography -- includes a vulnerable copy of OpenSSL</topic>
> <affects>
> <package>
> <name>py39-cryptography</name>
> <range><lt>39.0.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> <blockquote cite="https://osv.dev/vulnerability/GHSA-x4qr-2fvf-3mr5">
> pyca/cryptography's wheels include a statically linked copy of OpenSSL.
> The versions of OpenSSL included in cryptography 0.8.1-39.0.0 are vulnerable to a security issue.
> More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20221213.txt and https://www.openssl.org/news/secadv/20230207.txt.
> If you are building cryptography source ("sdist") then you are responsible for upgrading your copy of OpenSSL.
> Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2023-0286</cvename>
> <url>https://osv.dev/vulnerability/GHSA-x4qr-2fvf-3mr5</url>
> </references>
> <dates>
> <discovery>2023-02-08</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="a32ef450-9781-414b-a944-39f2f61677f2">
> <topic>py39-cryptography -- allows programmers to misuse an API</topic>
> <affects>
> <package>
> <name>py39-cryptography</name>
> <range><ge>1.8</ge><lt>39.0.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> alex reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-w7pp-m8wf-vj6r">
> Previously, `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers.
> This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python.
> This is a soundness bug -- it allows programmers to misuse an API, it cannot be exploited by attacker controlled data alone.
> This now correctly raises an exception.
> This issue has been present since `update_into` was originally introduced in cryptography 1.8.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2023-23931</cvename>
> <url>https://osv.dev/vulnerability/GHSA-w7pp-m8wf-vj6r</url>
> </references>
> <dates>
> <discovery>2023-02-07</discovery>
> <entry>2023-04-10</entry>
> </dates>
> </vuln>
>
> <vuln vid="ae132c6c-d716-11ed-956f-7054d21a9e2a">
> <topic>py39-tensorflow -- denial of service vulnerability</topic>
> <affects>
> <package>
> <name>py39-tensorflow</name>
> <range><lt>2.8.4</lt></range>
> <range><ge>2.9.0</ge><lt>2.9.3</lt></range>
> <range><ge>2.10.0</ge><lt>2.10.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Kang Hong Jin, Neophytos Christou, ååæº and Pattarakrit Rattankul report:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-cqvq-fvhr-v6hc">
> Another instance of CVE-2022-35935, where `SobolSample` is vulnerable to a denial of service via assumed scalar inputs, was found and fixed.
> </blockquote>
> Pattarakrit Rattankul reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-xf83-q765-xm6m">
> Another instance of CVE-2022-35991, where `TensorListScatter` and `TensorListScatterV2` crash via non scalar inputs in`element_shape`, was found in eager mode and fixed.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-35935</cvename>
> <url>https://osv.dev/vulnerability/GHSA-cqvq-fvhr-v6hc</url>
> <cvename>CVE-2022-35991</cvename>
> <url>https://osv.dev/vulnerability/GHSA-xf83-q765-xm6m</url>
> </references>
> <dates>
> <discovery>2022-11-21</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="52311651-f100-4720-8c62-0887dad6d321">
> <topic>py39-tensorflow -- unchecked argument causing crash</topic>
> <affects>
> <package>
> <name>py39-tensorflow</name>
> <range><lt>2.7.2</lt></range>
> <range><ge>2.8.0</ge><lt>2.8.1</lt></range>
> <range><ge>2.9.0</ge><lt>2.9.2</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Jingyi Shi reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-mgmh-g2v6-mqw5">
> The 'AvgPoolOp' function takes an argument `ksize` that must be positive but is not checked.
> A negative `ksize` can trigger a `CHECK` failure and crash the program.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-35941</cvename>
> <url>https://osv.dev/vulnerability/GHSA-mgmh-g2v6-mqw5</url>
> </references>
> <dates>
> <discovery>2022-09-16</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="951b513a-9f42-436d-888d-2162615d0fe4">
> <topic>py39-pymatgen -- regular expression denial of service</topic>
> <affects>
> <package>
> <name>py39-pymatgen</name>
> <range><le>2022.9.21</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> <blockquote cite="https://osv.dev/vulnerability/GHSA-5jqp-885w-xj32">
> An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-42964</cvename>
> <url>https://osv.dev/vulnerability/GHSA-5jqp-885w-xj32</url>
> </references>
> <dates>
> <discovery>2022-11-10</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="e87a9326-dd35-49fc-b20b-f57cbebaae87">
> <topic>py39-nicotine-plus -- Denial of service vulnerability</topic>
> <affects>
> <package>
> <name>py39-nicotine-plus</name>
> <range><lt>3.2.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> ztauras reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-p4v2-r99v-wjc2">
> Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2021-45848</cvename>
> <url>https://osv.dev/vulnerability/GHSA-p4v2-r99v-wjc2</url>
> </references>
> <dates>
> <discovery>2022-03-16</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="93db4f92-9997-4f4f-8614-3963d9e2b0ec">
> <topic>py39-slixmpp -- incomplete SSL certificate validation</topic>
> <affects>
> <package>
> <name>py39-slixmpp</name>
> <range><lt>1.8.3</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> <blockquote cite="https://osv.dev/vulnerability/GHSA-q6cq-m9gm-6q2f">
> Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-45197</cvename>
> <url>https://osv.dev/vulnerability/GHSA-q6cq-m9gm-6q2f</url>
> </references>
> <dates>
> <discovery>2022-12-25</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="b31f7029-817c-4c1f-b7d3-252de5283393">
> <topic>py39-suds -- vulnerable to symlink attacks</topic>
> <affects>
> <package>
> <name>py39-suds</name>
> <range><le>1.1.2</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> SUSE reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2013-32">
> cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2013-2217</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2013-32</url>
> </references>
> <dates>
> <discovery>2013-09-23</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="b692a49c-9ae7-4958-af21-cbf8f5b819ea">
> <topic>py39-impacket -- multiple path traversal vulnerabilities</topic>
> <affects>
> <package>
> <name>py39-impacket</name>
> <range><ge>0.9.10</ge><lt>0.9.23</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> asolino reports:
> <blockquote cite="https://osv.dev/vulnerability/PYSEC-2021-17">
> Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2021-31800</cvename>
> <url>https://osv.dev/vulnerability/PYSEC-2021-17</url>
> <url>https://osv.dev/vulnerability/GHSA-mj63-64x7-57xf</url>
> </references>
> <dates>
> <discovery>2021-05-05</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="326b2f3e-6fc7-4661-955d-a772760db9cf">
> <topic>py39-tflite -- buffer overflow vulnerability</topic>
> <affects>
> <package>
> <name>py39-tflite</name>
> <range><lt>2.8.4</lt></range>
> <range><ge>2.9.0</ge><lt>2.9.3</lt></range>
> <range><ge>2.10.0</ge><lt>2.10.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Thibaut Goetghebuer-Planchon reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-h6q3-vv32-2cq5">
> The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the bias to the result.
> Instead of `data_ptr += num_channels;` it should be `data_ptr += output_num_channels;` as if the number of input channels is different than the number of output channels, the wrong result will be returned and a buffer overflow will occur if num_channels &gt; output_num_channels.
> An attacker can craft a model with a specific number of input channels in a way similar to the attached example script.
> It is then possible to write specific values through the bias of the layer outside the bounds of the buffer.
> This attack only works if the reference kernel resolver is used in the interpreter (i.e. `experimental_op_resolver_type=tf.lite.experimental.OpResolverType.BUILTIN_REF` is used).
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-41894</cvename>
> <url>https://osv.dev/vulnerability/GHSA-h6q3-vv32-2cq5</url>
> </references>
> <dates>
> <discovery>2022-11-21</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="d82bcd2b-5cd6-421c-8179-b3ff0231029f">
> <topic>py39-tflite -- denial of service vulnerability</topic>
> <affects>
> <package>
> <name>py39-tflite</name>
> <range><lt>2.3.4</lt></range>
> <range><ge>2.4.0</ge><lt>2.4.3</lt></range>
> <range><ge>2.5.0</ge><lt>2.5.1</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Yakun Zhang of Baidu Security reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-wf5p-c75w-w3wh">
> An attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2021-37689</cvename>
> <url>https://osv.dev/vulnerability/GHSA-wf5p-c75w-w3wh</url>
> </references>
> <dates>
> <discovery>2021-08-25</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="a0509648-65ce-4a1b-855e-520a75bd2549">
> <topic>py39-cinder -- unauthorized data access</topic>
> <affects>
> <package>
> <name>py39-cinder</name>
> <range><lt>19.1.2</lt></range>
> <range><ge>20.0.0</ge><lt>20.0.2</lt></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Utkarsh Gupta reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc">
> An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0.
> By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2022-47951</cvename>
> <url>https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc</url>
> </references>
> <dates>
> <discovery>2023-01-27</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>
> <vuln vid="f4a94232-7864-4afb-bbf9-ff2dc8e288d1">
> <topic>py39-cinder -- data leak</topic>
> <affects>
> <package>
> <name>py39-cinder</name>
> <range><le>12.0.9</le></range>
> <range><ge>13.0.0</ge><le>13.0.9</le></range>
> <range><ge>14.0.0</ge><le>14.3.1</le></range>
> <range><ge>15.0.0</ge><le>15.6.0</le></range>
> <range><ge>16.0.0</ge><le>16.4.2</le></range>
> <range><ge>17.0.0</ge><le>17.4.0</le></range>
> <range><ge>18.0.0</ge><le>18.2.1</le></range>
> <range><ge>19.0.0</ge><le>19.2.0</le></range>
> <range><ge>20.0.0</ge><le>20.1.0</le></range>
> <range><ge>21.0.0</ge><le>21.1.0</le></range>
> <range><ge>22.0.0</ge><le>22.0.0.0rc2</le></range>
> </package>
> </affects>
> <description>
> <body xmlns="http://www.w3.org/1999/xhtml">
> Duncan Thomas reports:
> <blockquote cite="https://osv.dev/vulnerability/GHSA-qhch-g8qr-p497">
> The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.
> </blockquote>
> </body>
> </description>
> <references>
> <cvename>CVE-2014-3641</cvename>
> <url>https://osv.dev/vulnerability/GHSA-qhch-g8qr-p497</url>
> </references>
> <dates>
> <discovery>2022-05-17</discovery>
> <entry>2023-04-09</entry>
> </dates>
> </vuln>
>

Actions: View

Attachments on bug 270744: 241403 | 241423