Red Hat Openstack Platform 16.1 vulnerabilities

5 CVEs affecting Red Hat Openstack Platform 16.1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6110, published 2024-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-1394, published 2024-03-21. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in…
CVE-2024-4438, published 2024-05-08. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red…
CVE-2024-4437, published 2024-05-08. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using…
CVE-2024-4436, published 2024-05-08. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue occurs because the etcd package in the Red Hat OpenStack platform is using…
CVE-2023-6110, published 2024-11-17. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.