https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:55:38 +0000 https://vulnerability.circl.lu/vuln/cve-2018-16848 <p><strong>Affected:</strong> openstack-mistral</p> <p>A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.</p> <p><strong>Affected:</strong> openstack-mistral</p> <p>A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.</p> https://vulnerability.circl.lu/vuln/cve-2018-16848 https://vulnerability.circl.lu/vuln/usn-7465-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mistral, Ubuntu:Pro:18.04:LTS: mistral, Ubuntu:Pro:18.04:LTS: python-mistral-lib</p> <p>It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848)</p> <p>Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH private key filename commands. An attacker could possibly use this issue to expose sensitive information. (CVE-2018-16849)</p> <p>It was discovered that Mistral incorrectly handled the permissions of sensitive log files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3866)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mistral, Ubuntu:Pro:18.04:LTS: mistral, Ubuntu:Pro:18.04:LTS: python-mistral-lib</p> <p>It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848)</p> <p>Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH private key filename commands. An attacker could possibly use this issue to expose sensitive information. (CVE-2018-16849)</p> <p>It was discovered that Mistral incorrectly handled the permissions of sensitive log files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3866)</p> https://vulnerability.circl.lu/vuln/usn-7465-1