Skip to content
OpenAdvisories

Package · Debian

octavia

4 known vulnerabilities.

4 results · Feed

  • Critical 9.4

    In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers fiel…

  • Critical 9.4

    In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redi…

  • Medium 4.3

    OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another proje…

  • Critical 9.1

    OpenStack Octavia Amphora-Agent not requiring Client-Certificate

    Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP …