Red Hat Openstack Platform vulnerabilities

39 CVEs affecting Red Hat Openstack Platform, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-1932, published 2024-11-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2021-3654, published 2022-03-02. Medium severity, CVSS 6.1. EPSS: 26.8% chance of exploitation in the next 30 days. A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
CVE-2021-20270, published 2021-03-23. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only…
CVE-2022-2132, published 2022-08-31. High severity, CVSS 8.6. EPSS: 2.2% chance of exploitation in the next 30 days. A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
CVE-2023-1108, published 2023-09-14. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
CVE-2021-3563, published 2022-08-26. High severity, CVSS 7.4. EPSS: 1.7% chance of exploitation in the next 30 days. A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on.…
CVE-2022-0718, published 2022-08-29. Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days. A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double…
CVE-2017-15114, published 2017-11-27. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional…
CVE-2020-25658, published 2020-11-12. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Latest

CVE-2023-1932, published 2024-11-07. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in…
CVE-2024-8007, published 2024-08-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images…
CVE-2024-7319, published 2024-08-02. Medium severity, CVSS 5.0. EPSS: 0.4% chance of exploitation in the next 30 days. An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and…
CVE-2023-6725, published 2024-03-15. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker…
CVE-2023-5625, published 2023-11-01. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all…
CVE-2023-1636, published 2023-09-24. Medium severity, CVSS 5.0. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP,…
CVE-2023-1633, published 2023-09-24. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
CVE-2023-1625, published 2023-09-24. Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days. An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden.…