Advisories · Technology

Red Hat OpenStack Platform 16.1.

Every CVE that names Red Hat OpenStack Platform 16.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-8007 CVE record

CVSS 8.1 High

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- Weak cryptography or TLS
Not analysed yet 21 Aug 2024
CVE-2024-4438 CVE record

CVSS 7.5 High

Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
Not analysed yet 8 May 2024
CVE-2024-4437 CVE record

CVSS 7.5 High

Etcd: incomplete fix for cve-2021-44716 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
Not analysed yet 8 May 2024
CVE-2024-4436 CVE record

CVSS 7.5 High

Etcd: incomplete fix for cve-2022-41723 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
Not analysed yet 8 May 2024
CVE-2023-6725 CVE record

CVSS 5.5 Medium

Tripleo-ansible: bind keys are world readable
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- CWE-1220
Not analysed yet 15 Mar 2024
CVE-2023-5366 CVE record

CVSS 7.1 High

Openvswitch don't match packets on nd_target field
- openvswitch
- Red Hat Fast Datapath for RHEL 7
- CWE-345
Not analysed yet 6 Oct 2023