Skip to contentRed Hat Openstack Platform vulnerabilities
- red hat builds for red hat openshift, custom metric autoscaler operator for red hat openshift, multicluster global hub +24 more +26 moreGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsCVE-2025-8556Fix available3.7 Low
- hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 moreHibernate-validator: rendering of invalid html with safehtml leads to html injection and xssCVE-2023-1932Fix available6.1 Medium
- red hat ansible automation platform execution environments, ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +4 more +6 moreAnsible-core: ansible-core user may read/write unauthorized contentCVE-2024-9902Public exploitFix available6.3 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed bufferCVE-2024-9355Fix available6.5 Medium
- redhat openstack platform, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrorsCVE-2024-8007Fix available8.1 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unboundCVE-2024-43168Fix available4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unboundCVE-2024-43167Fix available2.8 Low
- openstack heat, red hat openstack platform 13 (queens), openstack platform 16.1 +3 more +5 moreOpenstack-heat: incomplete fix for cve-2023-1625CVE-2024-73195.0 Medium
- red hat openstack platform 16.2, openstack platform 17.1 for rhel 9 +1 moreRhosp-director: cleartext passwords exposed in logsCVE-2024-4840Fix available5.5 Medium
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 for rhel 9 +1 more +3 moreEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformCVE-2024-44387.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2021-44716 in openstack platformCVE-2024-44377.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2022-41723 in openstack platformCVE-2024-44367.5 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +4 more +6 moreTripleo-ansible: bind keys are world readableCVE-2023-6725Fix available5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of serviceCVE-2024-2182Fix available6.5 Medium
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.0 +3 more +5 moreOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeCVE-2023-6110Fix available5.5 Medium
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreGlance-store: glance store access key logged in debug log levelCVE-2024-1141Fix available5.5 Medium
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat buildsCVE-2023-5625Fix available5.3 Medium
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInsecure barbican configuration file leaking credentialCVE-2023-1633Fix available6.6 Medium
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreIncomplete container isolationCVE-2023-16366.0 Medium
- red hat openstack platform 13.0 (queens) for rhel 7.6 eus, openstack platform 13.0 - els, redhat openstack platform +2 moreInstack-undercloud: rsync leaks information to undercloudCVE-2022-3596Fix available7.5 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium
- red hat openstack platform 16.2, redhat openstack platform +1 morePlain-text passwords saved in /var/log/messagesCVE-2022-32614.4 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- red hat openstack platform 13 (queens) operational tools, openstack platform 16.1, openstack platform 16.2 +4 more +6 moreOpenstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)CVE-2023-3637Fix available4.3 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- openstack heat, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInformation leak in apiCVE-2023-1625Fix available7.4 High
- openstack barbican, redhat openstack, red hat openstack platform +1 more +3 moreA flaw was found in the openstack-barbican component. This issue allows an access policy bypass...CVE-2022-3100Fix available5.9 Medium
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypassCVE-2026-11998Fix available7.6 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Fix available6.5 Medium
- redhat packstack, red hat openstack folsom for rhel 6, enterprise linux openstack platform 5 (icehouse) +3 more +5 morePackstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creationCVE-2013-1815Fix available6.1 Medium
- openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 moreOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestCVE-2013-1840Fix available6.5 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 High
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePuppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.CVE-2013-02665.5 Medium
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePackstack: packstack: arbitrary file overwrite via symlink attackCVE-2013-02618.8 High
- openstack folsom, grizzly, red hat openstack folsom for rhel 6 +3 more +5 moreOpenstack nova: information leak in libvirt lvm-backed instancesCVE-2012-5625Fix available6.5 Medium
- openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 moreOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handlingCVE-2012-5571Fix available5.4 Medium