Red Hat Red Hat OpenStack Platform 18.0
28 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93009 | | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | MEDIUM 4.3 | |||
| CVE-2026-93010 | | Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check | MEDIUM 4.3 | |||
| CVE-2026-93006 | | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | MEDIUM 6.8 | |||
| CVE-2026-93007 | | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | MEDIUM 5.3 | |||
| CVE-2026-93011 | | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | MEDIUM 5.3 | |||
| CVE-2026-93008 | | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | MEDIUM 6.8 | |||
| CVE-2026-92982 | | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection | HIGH 8.5 | 0.5 % | ||
| CVE-2026-83535 | | Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison | HIGH 7.4 | 0.3 % | ||
| CVE-2026-83536 | | Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris) | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-107935 | | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-87872 | | Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enab… | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-87874 | | Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning … | HIGH 8.1 | 0.7 % | ||
| CVE-2026-80158 | | Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa b… | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-11837 | | Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown | HIGH 7.3 | 0.2 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-14010 | | Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-6110 | | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-43168 | | Unbound: heap-buffer-overflow in unbound | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-43167 | | Unbound: null pointer dereference in unbound | LOW 2.8 | 0.4 % | ||
| CVE-2024-4438 | | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4437 | | Etcd: incomplete fix for cve-2021-44716 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4436 | | Etcd: incomplete fix for cve-2022-41723 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2023-6725 | | Tripleo-ansible: bind keys are world readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-1141 | | Glance-store: glance store access key logged in debug log level | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-3637 | | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | MEDIUM 6.5 | 1.3 % | ||
| CVE-2013-0270 | | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-0335 | | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2012-5571 | | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |