Vulnerabilities > Redhat > Openstack Platform > 16.1

DATE CVE VULNERABILITY TITLE RISK
2024-08-21 CVE-2024-8007 Unspecified vulnerability in Redhat Openstack Platform 16.1/16.2/17.1
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director.
network
high complexity
redhat
8.1
2024-08-02 CVE-2024-7319 An incomplete fix for CVE-2023-1625 was found in openstack-heat.
network
low complexity
openstack redhat
5.0
2023-12-18 CVE-2023-48795 Improper Validation of Integrity Check Value vulnerability in multiple products
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack.
5.9
2023-10-10 CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. 7.5
2023-09-24 CVE-2023-1625 An information leak was discovered in OpenStack heat.
network
low complexity
openstack redhat
5.0
2023-09-24 CVE-2023-1633 Insufficiently Protected Credentials vulnerability in multiple products
A credentials leak flaw was found in OpenStack Barbican.
local
low complexity
openstack redhat CWE-522
5.5
2023-09-24 CVE-2023-1636 A vulnerability was found in OpenStack Barbican containers.
network
low complexity
openstack redhat
5.0
2023-04-10 CVE-2023-1668 Always-Incorrect Control Flow Implementation vulnerability in multiple products
A flaw was found in openvswitch (OVS).
network
low complexity
cloudbase debian redhat CWE-670
8.2
2023-03-06 CVE-2022-3277 Resource Exhaustion vulnerability in multiple products
An uncontrolled resource consumption flaw was found in openstack-neutron.
network
low complexity
redhat openstack CWE-400
6.5
2022-09-06 CVE-2022-23451 An authorization flaw was found in openstack-barbican.
network
low complexity
openstack redhat
8.1