Skip to content
OpenAdvisories

Archive

29 January 2016

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.3

    High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operation…

  • High 7.5

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

  • High 7.5

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted …