Security
فارسی
All products

Red Hat OpenStack Platform 11 (Ocata)/opendaylight

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Denial of Service in Google GuavaCVE-2018-10237 · GHSA-MVR2-9PJ6-7W5J com.google.guava:guava-jdk5com.google.guava:guava MavenRed Hat Medium Fix reported
Password change doesn't result in Karaf clearing cacheCVE-2017-1000406 · GHSA-4PX2-GQHV-MRC7 org.opendaylight.integration:distribution-karafRed Hat OpenStack Platform 11 (Ocata)/opendaylight MavenRed Hat High No fix reported
Possible privilege escalation in org.springframework:spring-coreCVE-2018-1272 · GHSA-4487-X383-QPPH org.springframework:spring-coreRed Hat JBoss A-MQ 6/spring MavenRed Hat High Fix reported
OpenDaylight Controller DoSCVE-2017-1000361 · GHSA-8P5X-W9CV-92HV org.opendaylight.controller:releasepomRed Hat OpenStack Platform 10 (Newton)/opendaylight MavenRed Hat High No fix reported
Spring Framework Cross Site Tracing (XST)CVE-2018-11039 · GHSA-9GCM-F4X3-8JPW org.springframework:spring-webRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Moderate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040 · GHSA-F26X-PR96-VW86 org.springframework:spring-coreRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199 · GHSA-V596-FWHQ-8X48 org.springframework.security:spring-security-coreorg.springframework:spring-core MavenRed Hat Medium Fix reported
OpenDaylight NULL Pointer DereferenceCVE-2017-1000360 · GHSA-GJQ3-997P-HG6F org.opendaylight.controller:releasepomRed Hat OpenStack Platform 10 (Newton)/opendaylight MavenRed Hat Medium No fix reported
Cross-site Scripting in Jolokia agentCVE-2018-1000129 · GHSA-HFPG-GQJW-779M org.jolokia:jolokia-coreRed Hat AMQ Broker 7/jolokia-core MavenRed Hat Medium Fix reported
Akka Java Serialization vulnerabilityCVE-2017-1000034 · GHSA-MM57-9J6Q-RXM2 com.typesafe.akka:akka-actorRed Hat OpenStack Platform 10 (Newton)/opendaylight MavenRed Hat High Fix reported
Moderate severity vulnerability that affects org.apache.karaf:apache-karafCVE-2016-8750 · GHSA-CHJ8-5XGW-WCVJ org.apache.karaf:apache-karafRed Hat JBoss A-MQ 6/karaf MavenRed Hat Medium Fix reported
SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)CVE-2016-2183 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 5/openssl097a Red Hat Medium No fix reported
opendaylight: DOS by odl-mdsal-xsql featureCVE-2017-1000359 Red Hat OpenStack Platform 10 (Newton)/opendaylightRed Hat OpenStack Platform 11 (Ocata)/opendaylight Red Hat Low No fix reported
opendaylight: uncaught exception by odl-restconf featureCVE-2017-1000358 Red Hat OpenStack Platform 10 (Newton)/opendaylightRed Hat OpenStack Platform 11 (Ocata)/opendaylight Red Hat Low No fix reported
opendaylight: Controller denial-of-service due to "expired" flows taking up the memory resource of CONFIG DSCVE-2017-1000411 Red Hat OpenStack Platform 10 (Newton)/opendaylightRed Hat OpenStack Platform 11 (Ocata)/opendaylight Red Hat Medium No fix reported
opendaylight: Insecure behavior in node reconciliation processCVE-2018-1078 Red Hat OpenStack Platform 10 (Newton)/opendaylightRed Hat OpenStack Platform 11 (Ocata)/opendaylight Red Hat Medium No fix reported
openflow: Denial of Service, Improper Authentication and Authorization, and Covert Channel in the OpenFlow handshakeCVE-2018-1000155 Red Hat OpenStack Platform 10 (Newton)/opendaylightRed Hat OpenStack Platform 11 (Ocata)/opendaylight Red Hat Medium No fix reported