Approved changes feed: RSS · Atom

cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductOpenstack Cloud Crowbar (d1cb217a-2e24-5114-8bc0-aa351468bbb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31431 vulnerable 2026-06-08 07:57:14.890894 crypto: algif_aead - Revert to operating out-of-place
HIGH (7.8)
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Published: 2026-04-22T08:15:10.123Z
Updated: 2026-07-15T01:09:17.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27239 vulnerable 2026-06-08 05:41:55.078374 Details available
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Published: 2022-04-27T00:00:00.000Z
Updated: 2024-08-03T05:25:32.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25321 not_vulnerable 2026-06-08 05:30:40.664414 arpwatch: Local privilege escalation from runtime user to root
HIGH (7.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
Published: 2021-06-30T08:25:12.750Z
Updated: 2024-09-16T18:43:24.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25317 not_vulnerable 2026-06-08 05:30:40.657246 cups: ownership of /var/log/cups allows the lp user to create files as root
LOW (3.3)
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
Published: 2021-05-05T09:35:13.321Z
Updated: 2024-09-17T00:32:16.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17954 vulnerable 2026-06-08 05:11:07.030156 crowbar provision leaks admin password to all nodes in cleartext
CRITICAL (9.3)
An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.
Published: 2020-04-03T07:05:13.265Z
Updated: 2024-09-16T20:02:21.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.