Red Hat OpenStack Platform 16.1 vulnerabilities
5 known vulnerabilities in Red Hat OpenStack Platform 16.1 from Red Hat. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Red Hat OpenStack Platform 17.1 for RHEL 8: Improper Certificate Validation
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirr
- 7.5 High severity
Red Hat OpenStack Platform 16.1: Uncontrolled Resource Consumption
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2
- 7.5 High severity
Red Hat OpenStack Platform 16.1: Uncontrolled Resource Consumption
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha
- 7.5 High severity
Red Hat OpenStack Platform 16.1: Uncontrolled Resource Consumption
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha
- 7.5 High severity
Red Hat Ansible Automation Platform 2.4 for…: Missing Release of Memory after Effective Lifetime
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects