Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenStack Platform 16.2

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne 21 oct. 2026
CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée 15 oct. 2026
CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 Élevée 17 sept. 2026
CVE-2026-92091 Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array 5.9 Moyenne 16 sept. 2026
CVE-2026-84828 Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token 6.5 Moyenne 10 sept. 2026
CVE-2026-84185 Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification 5.9 Moyenne 3 sept. 2026
CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens 5.9 Moyenne 27 août 2026
CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs… 7.6 Élevée 24 juin 2026
CVE-2026-49759 Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to… 8.8 Élevée 10 juin 2026
CVE-2026-50589 In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some… 5.3 Moyenne 4 juin 2026
CVE-2026-44393 An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0 7.4 Élevée 4 juin 2026
CVE-2026-41283 OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed 9.9 Critique 4 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-42999 An issue was discovered in OpenStack Keystone before 29.0.2 6.0 Moyenne 28 mai 2026
CVE-2026-43000 An issue was discovered in OpenStack Keystone before 29.0.2 6.0 Moyenne 28 mai 2026
CVE-2026-42790 Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS… 7.6 Élevée 27 mai 2026
CVE-2026-42789 Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)… 7.0 Élevée 27 mai 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation 9.1 Critique 22 mai 2026
CVE-2026-46595 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… 10.0 Critique 22 mai 2026
CVE-2026-39829 The RSA and DSA public key parsers did not enforce size limits on key parameters 7.5 Élevée 22 mai 2026
CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… 9.1 Critique 22 mai 2026
CVE-2026-39835 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be… 5.3 Moyenne 22 mai 2026
CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were… 6.3 Moyenne 22 mai 2026
CVE-2026-39832 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… 9.1 Critique 22 mai 2026

Autres produits Red Hat