mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-12-30 05:58:39 +00:00
230 lines
9.5 KiB
JSON
230 lines
9.5 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2016-0737",
|
|
"ASSIGNER": "secalert@redhat.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A memory-leak issue was found in OpenStack Object Storage (swift), in the client-to-proxy connection. An OpenStack-authenticated attacker could remotely trigger this flaw to cause denial of service through excess memory consumption."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Uncontrolled Resource Consumption",
|
|
"cweId": "CWE-400"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Red Hat",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:1.13.1-8.el6ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:1.13.1-8.el7ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:2.2.0-6.el7ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:2.3.0-3.el7ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "Red Hat Gluster Storage 3.1 for RHEL 6",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:1.13.1-8.el6ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "Red Hat Gluster Storage 3.1 for RHEL 7",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "0:1.13.1-8.el7ost",
|
|
"version_affected": "!"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
|
|
"refsource": "MISC",
|
|
"name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
|
|
},
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2016-0329.html",
|
|
"refsource": "MISC",
|
|
"name": "http://rhn.redhat.com/errata/RHSA-2016-0329.html"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0328",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0328"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0329",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0329"
|
|
},
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2016-0128.html",
|
|
"refsource": "MISC",
|
|
"name": "http://rhn.redhat.com/errata/RHSA-2016-0128.html"
|
|
},
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2016-0155.html",
|
|
"refsource": "MISC",
|
|
"name": "http://rhn.redhat.com/errata/RHSA-2016-0155.html"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/81432",
|
|
"refsource": "MISC",
|
|
"name": "http://www.securityfocus.com/bid/81432"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0126",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0126"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0127",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0127"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0128",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0128"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2016:0155",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/errata/RHSA-2016:0155"
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/security/cve/CVE-2016-0737",
|
|
"refsource": "MISC",
|
|
"name": "https://access.redhat.com/security/cve/CVE-2016-0737"
|
|
},
|
|
{
|
|
"url": "https://bugs.launchpad.net/swift/+bug/1466549",
|
|
"refsource": "MISC",
|
|
"name": "https://bugs.launchpad.net/swift/+bug/1466549"
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1298924",
|
|
"refsource": "MISC",
|
|
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1298924"
|
|
},
|
|
{
|
|
"url": "https://launchpad.net/swift/+milestone/2.4.0",
|
|
"refsource": "MISC",
|
|
"name": "https://launchpad.net/swift/+milestone/2.4.0"
|
|
},
|
|
{
|
|
"url": "https://review.openstack.org/#/c/217750/",
|
|
"refsource": "MISC",
|
|
"name": "https://review.openstack.org/#/c/217750/"
|
|
},
|
|
{
|
|
"url": "https://security.openstack.org/ossa/OSSA-2016-004.html",
|
|
"refsource": "MISC",
|
|
"name": "https://security.openstack.org/ossa/OSSA-2016-004.html"
|
|
}
|
|
]
|
|
},
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Red Hat would like to thank the Openstack project for reporting this issue. Upstream acknowledges Romain Le Disez (OVH) and \u00d6rjan Persson (Kiliaro) as the original reporters."
|
|
}
|
|
],
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"accessComplexity": "LOW",
|
|
"accessVector": "NETWORK",
|
|
"authentication": "SINGLE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"availabilityRequirement": "NOT_DEFINED",
|
|
"baseScore": 6.8,
|
|
"collateralDamagePotential": "NOT_DEFINED",
|
|
"confidentialityImpact": "NONE",
|
|
"confidentialityRequirement": "NOT_DEFINED",
|
|
"environmentalScore": 0,
|
|
"exploitability": "NOT_DEFINED",
|
|
"integrityImpact": "NONE",
|
|
"integrityRequirement": "NOT_DEFINED",
|
|
"remediationLevel": "NOT_DEFINED",
|
|
"reportConfidence": "NOT_DEFINED",
|
|
"targetDistribution": "NOT_DEFINED",
|
|
"temporalScore": 0,
|
|
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
|
|
"version": "2.0"
|
|
}
|
|
]
|
|
}
|
|
} |