Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.
Denial Of Service
Libreswan
NVD
CVSS 2.0
5.0
EPSS
1.4%
Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information Disclosure
Havana
NVD
CVSS 2.0
5.0
EPSS
0.6%