Vulnerabilities of Red Hat Red Hat OpenStack Platform 17.1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1287	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1207	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-22797	An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1,…	9.9 Critical	Jan 19, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2025-14010	A flaw was found in ansible-collection-community-general	5.5 Medium	Dec 4, 2025
CVE-2021-4472	The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook'…	6.5 Medium	Nov 26, 2025
CVE-2025-8556	A flaw was found in CIRCL's implementation of the FourQ elliptic curve	3.7 Low	Aug 6, 2025
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Medium	Aug 8, 2024
CVE-2024-43167	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	2.8 Low	Aug 8, 2024
CVE-2024-4437	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716	7.5 High	May 8, 2024
CVE-2024-4436	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723	7.5 High	May 8, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2023-6725	An access-control flaw was found in the OpenStack Designate component where private configuration information…	5.5 Medium	Mar 15, 2024
CVE-2023-3637	An uncontrolled resource consumption flaw was found in openstack-neutron	4.3 Medium	Jul 25, 2023
CVE-2013-0270	A flaw was found in OpenStack Keystone	6.5 Medium	Apr 12, 2013
CVE-2013-1840	A flaw was found in OpenStack Glance	6.5 Medium	Mar 22, 2013
CVE-2013-0335	OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access…	7.6 High	Mar 22, 2013
CVE-2012-5625	OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not…	6.5 Medium	Dec 26, 2012
CVE-2012-5571	A flaw was found in OpenStack Keystone	5.4 Medium	Dec 18, 2012

Other Red Hat products