cvelist/2016/0xxx/CVE-2016-0737.json
2023-02-02 16:01:00 +00:00

230 lines
9.5 KiB
JSON

{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2016-0737",
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "A memory-leak issue was found in OpenStack Object Storage (swift), in the client-to-proxy connection. An OpenStack-authenticated attacker could remotely trigger this flaw to cause denial of service through excess memory consumption."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Uncontrolled Resource Consumption",
"cweId": "CWE-400"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Red Hat",
"product": {
"product_data": [
{
"product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"version": {
"version_data": [
{
"version_value": "0:1.13.1-8.el6ost",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"version": {
"version_data": [
{
"version_value": "0:1.13.1-8.el7ost",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"version": {
"version_data": [
{
"version_value": "0:2.2.0-6.el7ost",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"version": {
"version_data": [
{
"version_value": "0:2.3.0-3.el7ost",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat Gluster Storage 3.1 for RHEL 6",
"version": {
"version_data": [
{
"version_value": "0:1.13.1-8.el6ost",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat Gluster Storage 3.1 for RHEL 7",
"version": {
"version_data": [
{
"version_value": "0:1.13.1-8.el7ost",
"version_affected": "!"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"refsource": "MISC",
"name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0329.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-0329.html"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0328",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0328"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0329",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0329"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0128.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-0128.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0155.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-0155.html"
},
{
"url": "http://www.securityfocus.com/bid/81432",
"refsource": "MISC",
"name": "http://www.securityfocus.com/bid/81432"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0126",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0126"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0127",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0127"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0128",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0128"
},
{
"url": "https://access.redhat.com/errata/RHSA-2016:0155",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2016:0155"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2016-0737",
"refsource": "MISC",
"name": "https://access.redhat.com/security/cve/CVE-2016-0737"
},
{
"url": "https://bugs.launchpad.net/swift/+bug/1466549",
"refsource": "MISC",
"name": "https://bugs.launchpad.net/swift/+bug/1466549"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1298924",
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1298924"
},
{
"url": "https://launchpad.net/swift/+milestone/2.4.0",
"refsource": "MISC",
"name": "https://launchpad.net/swift/+milestone/2.4.0"
},
{
"url": "https://review.openstack.org/#/c/217750/",
"refsource": "MISC",
"name": "https://review.openstack.org/#/c/217750/"
},
{
"url": "https://security.openstack.org/ossa/OSSA-2016-004.html",
"refsource": "MISC",
"name": "https://security.openstack.org/ossa/OSSA-2016-004.html"
}
]
},
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank the Openstack project for reporting this issue. Upstream acknowledges Romain Le Disez (OVH) and \u00d6rjan Persson (Kiliaro) as the original reporters."
}
],
"impact": {
"cvss": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 6.8,
"collateralDamagePotential": "NOT_DEFINED",
"confidentialityImpact": "NONE",
"confidentialityRequirement": "NOT_DEFINED",
"environmentalScore": 0,
"exploitability": "NOT_DEFINED",
"integrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"targetDistribution": "NOT_DEFINED",
"temporalScore": 0,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
"version": "2.0"
}
]
}
}