Advisories · Technology
Red Hat OpenStack Platform 16.2.
Every CVE that names Red Hat OpenStack Platform 16.2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.7
- Code injection
- CVSS 5.9 Medium
Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 6.5 Medium
Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Broken access control
- CVSS 5.9 Medium
Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Weak cryptography or TLS
- CVSS 5.9 Medium
Jwcrypto: jwcrypto: denial of service via malformed jwe tokens
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 5.9 Medium
Openvswitch: open vswitch: denial of service via malformed ftp epasv command
- Red Hat Fast Datapath for RHEL 7
- Red Hat Fast Datapath for RHEL 8
- Memory corruption
- CVSS 8.1 High
Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- Weak cryptography or TLS
- CVSS 4.8 Medium
Unbound: heap-buffer-overflow in unbound
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 2.8 Low
Unbound: null pointer dereference in unbound
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.5 Medium
Rhosp-director: cleartext passwords exposed in logs
- Red Hat OpenStack Platform 17.1 for RHEL 9
- Red Hat OpenStack Platform 16.2
- Information disclosure
- CVSS 7.5 High
Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
- CVSS 7.5 High
Etcd: incomplete fix for cve-2021-44716 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
- CVSS 7.5 High
Etcd: incomplete fix for cve-2022-41723 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
- CVSS 5.5 Medium
Tripleo-ansible: bind keys are world readable
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- CWE-1220
- CVSS 7.1 High
Openvswitch don't match packets on nd_target field
- openvswitch
- Red Hat Fast Datapath for RHEL 7
- CWE-345
- CVSS 4.4 Medium
Plain-text passwords saved in /var/log/messages
- openstack
- Red Hat OpenStack Platform 16.2
- CWE-256