SUSE Openstack Cloud vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SUSE Openstack Cloud: 6 record(s), with affected versions and fixes.cpe:2.3:a:suse:openstack_cloud
CVE-2026-31431
High · 7.8
KEV Urgent · 72 Public exploit CWE-669 Apr 22, 2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVE-2018-12122
High · 7.5
CWE-400 Nov 28, 2018
Uncontrolled Resource Consumption in Nodejs Node.js
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
CVE-2018-12116
High · 7.5
CWE-115 Nov 28, 2018
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If…
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.
CVE-2016-3718
Medium · 5.5
KEV High · 61 Public exploit CWE-918 May 5, 2016
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715
Medium · 5.5
KEV High · 61 Public exploit CWE-552 May 5, 2016
ImageMagick Arbitrary File Deletion Vulnerability
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-3427
Critical · 9.8
KEV High · 63 CWE-284 Apr 21, 2016
Oracle Java SE and JRockit Unspecified Vulnerability
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.