Vulnerabilities > Redhat > Openstack Platform
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-18 | CVE-2023-48795 | Improper Validation of Integrity Check Value vulnerability in multiple products The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. network high complexity openbsd putty filezilla-project microsoft panic roumenpetrov winscp bitvise lancom-systems vandyke libssh net-ssh ssh2-project proftpd freebsd crates tera-term-project oryx-embedded crushftp netsarang paramiko redhat golang russh-project sftpgo-project erlang matez libssh2 asyncssh-project dropbear-ssh-project jadaptive ssh thorntech netgate connectbot apache tinyssh trilead kitty-project gentoo CWE-354 | 5.9 |
| 2023-11-01 | CVE-2023-5625 | Unspecified vulnerability in Redhat products A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products. | 7.5 |
| 2023-10-10 | CVE-2023-44487 | Resource Exhaustion vulnerability in multiple products The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 7.5 |
| 2023-09-24 | CVE-2023-1625 | An information leak was discovered in OpenStack heat. | 5.0 |
| 2023-09-24 | CVE-2023-1633 | Insufficiently Protected Credentials vulnerability in multiple products A credentials leak flaw was found in OpenStack Barbican. | 5.5 |
| 2023-09-24 | CVE-2023-1636 | A vulnerability was found in OpenStack Barbican containers. | 5.0 |
| 2023-09-20 | CVE-2022-3596 | Unspecified vulnerability in Redhat Openstack Platform 13.0 An information leak was found in OpenStack's undercloud. | 7.5 |
| 2023-09-15 | CVE-2022-3261 | Cleartext Transmission of Sensitive Information vulnerability in Redhat Openstack Platform 16.2 A flaw was found in OpenStack. | 7.5 |
| 2023-09-14 | CVE-2023-1108 | Infinite Loop vulnerability in multiple products A flaw was found in undertow. | 7.5 |
| 2023-07-25 | CVE-2023-3637 | Resource Exhaustion vulnerability in Redhat Openstack Platform 13.0/16.2 An uncontrolled resource consumption flaw was found in openstack-neutron. | 6.5 |