Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openstack_platform:10.0:*:*:*:*:*:*:*

part: a version: 10.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenstack Platform (95bf8034-38d8-547c-aebb-d1fa50a4e6e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/fog/fog-openstack purl2cpe 2026-06-01 10:12:55.260772

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3563 vulnerable 2026-06-08 05:33:52.798871 Details available
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.
Published: 2022-08-26T15:25:41.000Z
Updated: 2025-02-13T16:28:24.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20270 vulnerable 2026-06-08 05:29:08.866549 Details available
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
Published: 2021-03-23T16:40:22.000Z
Updated: 2024-08-03T17:37:23.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20267 vulnerable 2026-06-08 05:29:08.856564 Details available
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.
Published: 2021-05-28T18:46:11.000Z
Updated: 2024-08-03T17:37:23.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20257 vulnerable 2026-06-08 05:29:08.828695 Details available
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Published: 2022-03-16T14:12:26.000Z
Updated: 2024-08-03T17:37:23.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14394 vulnerable 2026-06-08 05:19:23.236857 Details available
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
Published: 2022-08-17T00:00:00.000Z
Updated: 2024-08-04T12:46:34.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14365 vulnerable 2026-06-08 05:19:23.136831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12067 vulnerable 2026-06-08 05:12:38.514495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.