CVE-2015-7944
Summary
| CVE | CVE-2015-7944 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-18 17:29:00 UTC |
| Updated | 2021-09-08 17:07:00 UTC |
| Description | The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service (resource consumption) via SSL parameter renegotiation. |
Risk And Classification
Problem Types: CWE-399
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ganeti Project | Ganeti | 2.10.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc3 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.6 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.7 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.11.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.6 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.7 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.13.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | beta2 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.15.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.0 | rc3 | All | All |
| Application | Ganeti Project | Ganeti | 2.10.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.6 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.10.7 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.11.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.11.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.6 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.11.7 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.12.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.3 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.4 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.12.5 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.13.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.13.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.13.2 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | beta2 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.0 | rc2 | All | All |
| Application | Ganeti Project | Ganeti | 2.14.1 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | All | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | beta1 | All | All |
| Application | Ganeti Project | Ganeti | 2.15.0 | rc1 | All | All |
| Application | Ganeti Project | Ganeti | 2.15.1 | All | All | All |
| Application | Ganeti Project | Ganeti | All | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.10.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.10.0 | rc2 | All | All |
| Application | Spi-inc | Ganeti | 2.10.0 | rc3 | All | All |
| Application | Spi-inc | Ganeti | 2.10.1 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.2 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.3 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.4 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.5 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.6 | All | All | All |
| Application | Spi-inc | Ganeti | 2.10.7 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.11.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.11.1 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.2 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.3 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.4 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.5 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.6 | All | All | All |
| Application | Spi-inc | Ganeti | 2.11.7 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.12.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.12.0 | rc2 | All | All |
| Application | Spi-inc | Ganeti | 2.12.1 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.2 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.3 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.4 | All | All | All |
| Application | Spi-inc | Ganeti | 2.12.5 | All | All | All |
| Application | Spi-inc | Ganeti | 2.13.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.13.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.13.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.13.1 | All | All | All |
| Application | Spi-inc | Ganeti | 2.13.2 | All | All | All |
| Application | Spi-inc | Ganeti | 2.14.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.14.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.14.0 | beta2 | All | All |
| Application | Spi-inc | Ganeti | 2.14.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.14.0 | rc2 | All | All |
| Application | Spi-inc | Ganeti | 2.14.1 | All | All | All |
| Application | Spi-inc | Ganeti | 2.15.0 | All | All | All |
| Application | Spi-inc | Ganeti | 2.15.0 | beta1 | All | All |
| Application | Spi-inc | Ganeti | 2.15.0 | rc1 | All | All |
| Application | Spi-inc | Ganeti | 2.15.1 | All | All | All |
| Application | Spi-inc | Ganeti | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| News — Ganeti 2.14.2 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| oCERT.org - oCERT Advisories | MISC | www.ocert.org | Patch, Third Party Advisory, VDB Entry |
| News — Ganeti 2.9.7 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| Ganeti Leaked Secret / Denial Of Service ≈ Packet Storm | MISC | packetstormsecurity.com | Patch, Third Party Advisory, VDB Entry |
| News — Ganeti 2.10.7 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| News — Ganeti 2.13.3 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| News — Ganeti 2.11.7 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| Ganeti - Multiple Vulnerabilities - Multiple dos Exploit | EXPLOIT-DB | www.exploit-db.com | |
| News — Ganeti 2.15.2 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| News — Ganeti 2.12.6 documentation | CONFIRM | docs.ganeti.org | Release Notes, Vendor Advisory |
| Debian -- Security Information -- DSA-3431-1 ganeti | DEBIAN | www.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.