Lucene search
+L

162 matches found

Github Security Blog
Github Security Blog
added 2022/08/04 12:00 a.m.31 views

OpenStack Nova Changing vnic_type breaks compute service restart

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

3.3CVSS6.9AI score0.00306EPSS
SaveExploits1References11Affected Software1
OSV
OSV
added 2022/08/04 12:00 a.m.55 views

GHSA-V725-C588-H936 OpenStack Nova Changing vnic_type breaks compute service restart

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

3.3CVSS3.8AI score0.00306EPSS
SaveExploits1References11
NVD
NVD
added 2022/08/03 7:15 a.m.45 views

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

3.3CVSS0.00306EPSS
SaveExploits1References3
Prion
Prion
added 2022/08/03 7:15 a.m.20 views

Design/Logic Flaw

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

1.7CVSS4.1AI score0.00306EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/08/03 7:15 a.m.48 views

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

3.3CVSS6.8AI score0.00306EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/08/03 6:43 a.m.45 views

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

4.4AI score0.00306EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/03 6:43 a.m.28 views

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

6.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/08/03 6:43 a.m.91 views

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

3.3CVSS4.8AI score0.00306EPSS
SaveExploits1
CVE
CVE
added 2022/08/03 6:43 a.m.135 views

CVE-2022-37394

CVE-2022-37394 (OpenStack Nova) : An issue in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2 allows an authenticated user to cause a compute service denial of service. The attack sequence is: create a Neutron port with the direct vnic_type, create an instance bound to th...

3.3CVSS3.9AI score0.00306EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/07/31 2:54 p.m.11 views

GSD-2022-1004917 sfc: fix use after free when disabling sriov

sfc: fix use after free when disabling sriov This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.324 by commit...

7.3AI score
SaveExploits0
OSV
OSV
added 2022/07/31 2:49 p.m.13 views

GSD-2022-1004864 sfc: fix use after free when disabling sriov

sfc: fix use after free when disabling sriov This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...

7.3AI score
SaveExploits0
OSV
OSV
added 2022/07/31 2:21 p.m.15 views

GSD-2022-1004568 sfc: fix use after free when disabling sriov

sfc: fix use after free when disabling sriov This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/06/30 9:07 p.m.80 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS6.7AI score0.05524EPSS
SaveExploits2References3
AlmaLinux
AlmaLinux
added 2022/06/30 12:00 a.m.69 views

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

7.8CVSS7.7AI score0.05524EPSS
SaveExploits2References6
OSV
OSV
added 2022/06/30 12:00 a.m.39 views

ALSA-2022:5316 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

7.8CVSS7.4AI score0.05524EPSS
SaveExploits2References6
Rockylinux
Rockylinux
added 2022/06/28 10:52 a.m.64 views

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

7.8CVSS7.7AI score0.05524EPSS
SaveExploits2
OSV
OSV
added 2022/06/28 10:52 a.m.44 views

RLSA-2022:5316 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

7.8CVSS7.5AI score0.05524EPSS
SaveExploits2References3
Virtuozzo
Virtuozzo
added 2022/02/07 12:00 a.m.30 views

Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-137)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, security, and monitoring. Additionally, this release delivers stability...

0.9AI score
SaveExploits0
OSV
OSV
added 2022/01/25 8:15 p.m.8 views

CVE-2022-23030

On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition VE uses the ixlv driver which is used in SR-IOV mode and requires Intel X710/XL710/XXV710 family of network adapters on the Hypervisor and TCP Segmentation...

5.3CVSS5.8AI score0.00889EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/25 7:11 p.m.153 views

CVE-2022-23030

CVE-2022-23030 affects BIG-IP VE when using the ixlv driver in SR-IOV mode with Intel X710/XL710/XXV710 adapters and TCP Segmentation Offload enabled. Undisclosed requests may cause increased CPU utilization, degrading performance and potentially leading to DoS. Exploitation details are not provi...

5.3CVSS5.6AI score0.00889EPSS
SaveExploits0References1Affected Software14
Rows per page
Query Builder