Redhat Openstack vulnerabilities

• hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 more Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss CVE-2023-1932 Fix available 6.1 MediumNovember 7, 2024
• redhat openstack platform, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 more Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors CVE-2024-8007 Fix available 8.1 HighAugust 21, 2024
• openstack heat, red hat openstack platform 13 (queens), openstack platform 16.1 +3 more +5 more Openstack-heat: incomplete fix for cve-2023-1625 CVE-2024-7319 5.0 MediumAugust 2, 2024
• red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +4 more +6 more Tripleo-ansible: bind keys are world readable CVE-2023-6725 Fix available 5.5 MediumMarch 15, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 more Python-eventlet: patch regression for cve-2021-21419 in some red hat builds CVE-2023-5625 Fix available 5.3 MediumOctober 27, 2023
• openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 more Insecure barbican configuration file leaking credential CVE-2023-1633 Fix available 6.6 MediumSeptember 24, 2023
• openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 more Incomplete container isolation CVE-2023-1636 6.0 MediumSeptember 24, 2023
• red hat openstack platform 13.0 (queens) for rhel 7.6 eus, openstack platform 13.0 - els, redhat openstack platform +2 more Instack-undercloud: rsync leaks information to undercloud CVE-2022-3596 Fix available 7.5 HighSeptember 20, 2023
• red hat openstack platform 16.2, redhat openstack platform +1 more Plain-text passwords saved in /var/log/messages CVE-2022-3261 4.4 MediumSeptember 15, 2023
• red hat openstack platform 13 (queens) operational tools, openstack platform 16.1, openstack platform 16.2 +4 more +6 more Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) CVE-2023-3637 Fix available 4.3 MediumJuly 25, 2023
• qemu, fedora extra packages for enterprise linux, fedora +8 more +10 more Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service CVE-2023-3354 Fix available 7.5 HighJuly 11, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat openstack A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be... CVE-2023-2088 Fix available 6.5 MediumMay 10, 2023
• cloudbase open vswitch, debian linux, redhat fast datapath +3 more +5 more A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will... CVE-2023-1668 Fix available 8.2 HighApril 10, 2023
• redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• openstack heat, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 more Information leak in api CVE-2023-1625 Fix available 7.4 HighMarch 27, 2023
• red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 more tripleo-ansible may disclose important configuration details from an OpenStack deployment CVE-2022-3146 Fix available 5.5 MediumMarch 23, 2023
• red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 more tripleo-ansible may disclose important configuration details from an OpenStack deployment CVE-2022-3101 Fix available 5.5 MediumMarch 23, 2023
• openstack glance, redhat openstack +1 more OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability CVE-2022-4134 2.8 LowMarch 6, 2023
• openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 more openstack-neutron uncontrolled resource consumption flaw CVE-2022-3277 Fix available 6.5 MediumMarch 6, 2023
• openstack A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git... CVE-2022-38065 8.8 HighDecember 21, 2022
• openstack barbican, redhat openstack, red hat openstack platform +1 more +3 more A flaw was found in the openstack-barbican component. This issue allows an access policy bypass... CVE-2022-3100 Fix available 5.9 MediumSeptember 29, 2022
• openstack keystone, [unknown] openstack-keystone, redhat openstack platform +2 more +4 more A flaw was found in OpenStack. The application credential tokens can be used even after they have... CVE-2022-2447 Fix available 6.6 MediumSeptember 1, 2022
• [unknown] dpdk, debian linux, dpdk data plane development kit +6 more +8 more A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker... CVE-2022-2132 Fix available 8.6 HighAugust 30, 2022
• openstack keystone, debian linux, redhat openstack platform +2 more Openstack Keystone Incorrect Authorization vulnerability CVE-2021-3563 Fix available 7.4 HighAugust 26, 2022
• qemu, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the... CVE-2020-14394 Fix available 3.2 LowAugust 17, 2022
• redhat openstack An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat... CVE-2022-1655 Fix available 6.5 MediumJuly 22, 2022
• red hat wildfly, redhat jboss enterprise application platform, openstack platform +2 more This is a concurrency issue that can result in the wrong caller principal being returned from the... CVE-2022-0866 Fix available 5.3 MediumMay 10, 2022
• [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 more Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates CVE-2021-4180 Fix available 4.3 MediumMarch 23, 2022
• debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 more python-oslo-utils has improper password parsing CVE-2022-0718 Fix available 4.9 MediumMarch 23, 2022
• openstack nova, openstack-nova, redhat openstack platform +2 more Open Redirect in CPython that affects users of OpenStack Nova CVE-2021-3654 Fix available EPSS 26.8% 6.1 MediumMarch 2, 2022
• ceph, redhat ceph storage, fedoraproject fedora +5 more +7 more A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... CVE-2021-3979 Fix available 6.5 MediumFebruary 19, 2022
• openstack barbican, redhat openstack platform +1 more openstack-barbican Denial of Service vulnerability CVE-2022-23452 Fix available 4.9 MediumJanuary 28, 2022
• openstack barbican, redhat openstack platform +1 more Barbican authorization flaw before v14.0.0 CVE-2022-23451 Fix available 8.1 HighJanuary 28, 2022
• qemu, debian linux, redhat codeready linux builder +7 more +9 more An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while... CVE-2021-3930 Fix available 6.5 MediumDecember 1, 2021
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 more Ansible discloses sensitive information in traceback error message CVE-2021-3620 Fix available 5.5 MediumOctober 23, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• redhat openstack-selinux, openstack platform +1 more An improper authorization flaw was discovered in openstack-selinux's applied policy where it does... CVE-2020-1690 Fix available 6.5 MediumJune 7, 2021
• openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 more Openstack Neutron has Insufficient Verification of IPv6 addresses CVE-2021-20267 Fix available 7.1 HighMay 28, 2021
• red hat tripleo-ansible, redhat openstack +1 more A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log... CVE-2021-31918 Fix available 7.5 HighMay 6, 2021
• pygments, debian linux, fedoraproject fedora +5 more +7 more Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• qemu, debian linux, fedoraproject fedora +5 more +7 more An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while... CVE-2021-20257 Fix available 6.5 MediumFebruary 23, 2021
• openvswitch, fedoraproject fedora, lldpd project lldpd +14 more +16 more A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause... CVE-2020-27827 Fix available 7.5 HighJanuary 13, 2021
• ceph, fedoraproject fedora, redhat ceph storage +2 more +4 more User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,... CVE-2020-27781 Fix available 7.1 HighDecember 18, 2020
• python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 more Timing attacks in python-rsa CVE-2020-25658 Fix available 7.5 HighNovember 12, 2020
• qemu, redhat enterprise linux, openstack platform +2 more hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a... CVE-2020-25743 Fix available 3.2 LowOctober 6, 2020
• red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 more Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the... CVE-2020-14355 Fix available 6.6 MediumOctober 6, 2020
• Show olderLoading…