Red Hat Openstack Platform 17.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:*
part: a version: 17.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openstack Platform (95bf8034-38d8-547c-aebb-d1fa50a4e6e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fog/fog-openstack |
purl2cpe | 2026-06-01 10:12:55.260786 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7319 |
vulnerable | 2026-06-08 06:58:21.882624 |
Openstack-heat: incomplete fix for cve-2023-1625
MEDIUM (5)
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Published: 2024-08-02T20:36:24.314Z
Updated: 2025-11-20T20:56:47.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1668 |
vulnerable | 2026-06-08 05:52:36.484823 |
Details available
A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
Published: 2023-04-10T00:00:00.000Z
Updated: 2025-04-23T16:22:48.998Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1636 |
vulnerable | 2026-06-08 05:52:36.444378 |
Incomplete container isolation
MEDIUM (6)
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.
Published: 2023-09-24T00:09:03.770Z
Updated: 2024-09-24T15:00:07.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1633 |
vulnerable | 2026-06-08 05:52:36.430503 |
Insecure barbican configuration file leaking credential
MEDIUM (6.6)
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
Published: 2023-09-24T00:09:50.215Z
Updated: 2024-09-24T15:00:33.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1625 |
vulnerable | 2026-06-08 05:52:36.421437 |
Information leak in api
HIGH (7.4)
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
Published: 2023-09-24T00:08:12.738Z
Updated: 2024-09-24T14:59:25.505Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.