← Back

Openstack Cloud

openstack_cloud

Vendor: Suse • 33 CVEs

CVEs (33)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4957
5Novell
NtpOpensuse+2 more
9Leap
Linux Enterprise DesktopLinux Enterprise Server+6 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
CVE-2016-4956
6Novell
NtpOpensuse+3 more
10Leap
Linux Enterprise DesktopLinux Enterprise Server+7 more
May 6, 2026
Jul 5, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete...Show more
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.Show less
CVE-2016-4955
6Novell
NtpOpensuse+3 more
10Leap
Linux Enterprise DesktopLinux Enterprise Server+7 more
May 6, 2026
Jul 5, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet wit...Show more
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.Show less
CVE-2016-4954
5Ntp
OpensuseOracle+2 more
12Leap
Linux Enterprise DesktopLinux Enterprise Server+9 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a...Show more
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.Show less
CVE-2016-4953
5Ntp
OpensuseOracle+2 more
12Leap
Linux Enterprise DesktopLinux Enterprise Server+9 more
May 6, 2026
Jul 5, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
CVE-2016-0264
3Ibm
RedhatSuse
13Enterprise Linux Desktop
Enterprise Linux Hpc Node SupplementaryEnterprise Linux Server+10 more
May 6, 2026
May 24, 2016
N/A· v4
5.6 MEDIUM· v3
6.8 MEDIUM· v2
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8...Show more
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.Show less
CVE-2016-3718
6Canonical
ImagemagickOpensuse+3 more
30Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux For Ibm Z Systems+27 more
Apr 22, 2026
May 5, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715
6Canonical
ImagemagickOpensuse+3 more
30Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux For Ibm Z Systems+27 more
Apr 22, 2026
May 5, 2016
N/A· v4
5.5 MEDIUM· v3
5.8 MEDIUM· v2
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-3427
8Apache
CanonicalDebian+5 more
38Cassandra
Debian LinuxE Series Santricity Management Plug Ins+35 more
Apr 22, 2026
Apr 21, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-2324
3Git Scm
OpensuseSuse
8Git
LeapLinux Enterprise Debuginfo+5 more
May 6, 2026
Apr 8, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
CVE-2016-2315
3Git Scm
OpensuseSuse
8Git
LeapLinux Enterprise Debuginfo+5 more
May 6, 2026
Apr 8, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVE-2016-1286
7Canonical
DebianFedoraproject+4 more
14Bind
Debian LinuxFedora+11 more
May 6, 2026
Mar 9, 2016
N/A· v4
8.6 HIGH· v3
5.0 MEDIUM· v2
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db....Show more
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.Show less
CVE-2016-1285
7Canonical
DebianFedoraproject+4 more
14Bind
Debian LinuxFedora+11 more
May 6, 2026
Mar 9, 2016
N/A· v4
6.8 MEDIUM· v3
4.3 MEDIUM· v2
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure an...Show more
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.Show less