Vulnerabilities of Red Hat Red Hat OpenStack Platform 18.0

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Medium	Oct 29, 2026
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Low	Oct 21, 2026
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 High	Oct 15, 2026
CVE-2026-83535	A flaw was found in openstack-network-exporter	7.4 High	Oct 12, 2026
CVE-2026-83536	A flaw was found in openstack-network-exporter	5.3 Medium	Oct 12, 2026
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critical	Oct 9, 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 High	Oct 8, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-87872	A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection	6.8 Medium	Sep 9, 2026
CVE-2026-87874	A flaw was found in the memcached cache plugin of the community.general Ansible collection	8.1 High	Sep 9, 2026
CVE-2026-80158	A flaw was found in the ipa_getkeytab module of the community.general Ansible collection	5.5 Medium	Aug 26, 2026
CVE-2026-49759	Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to…	8.8 High	Jun 10, 2026
CVE-2026-11837	Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown	7.3 High	Jun 10, 2026
CVE-2026-50589	In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some…	5.3 Medium	Jun 4, 2026
CVE-2026-44393	An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0	7.4 High	Jun 4, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-42999	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-43000	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 High	May 27, 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 High	May 27, 2026

Other Red Hat products