CVE-2015-7944
High · 7.5CVSS
7.5
EPSS
14.2%
Published
Aug 18, 2017
CISA due date
—
The record
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service (resource consumption) via SSL parameter renegotiation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | ganeti | 0 | 2.15.2-1 |
| Debian:12 | ganeti | 0 | 2.15.2-1 |
| Debian:13 | ganeti | 0 | 2.15.2-1 |
| Debian:14 | ganeti | 0 | 2.15.2-1 |
| Debian:7 | ganeti | 0 | 2.5.2-1+deb7u1 |
| Debian:8 | ganeti | 0 | 2.12.4-1+deb8u2 |
| Ubuntu:16.04:LTS | ganeti | 0 | 2.15.2-3 |
| Ubuntu:18.04:LTS | ganeti | 0 | 2.16.0~rc2-1build1 |
Related vulnerabilities
- CVE-2026-41983 Null pointer dereference vulnerability in the browser module. Impact: Successful… CWE-399
- CVE-2015-9252 An issue was discovered in QPDF before 7.0.0. CWE-399
- CVE-2012-0881 Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of… CWE-399
- CVE-2015-8855 The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service… CWE-399
- CVE-2015-8858 The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of… CWE-399
- CVE-2016-9312 ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a… CWE-399
- CVE-2016-8826 All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode… CWE-399
- CVE-2016-8858 The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote… CWE-399