RH
Product
Red Hat OpenStack Platform 13 (Queens)
32
CVEs
0
On KEV
8.8
Max CVSS
20
New 30D
Severity mix
Critical 0High 10Medium 22Low 0
Watch
Add Red Hat OpenStack Platform 13 (Queens) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93006 New | 6.8 | Oct 29 | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content Affected: All versions, or not specified |
| CVE-2026-93008 New | 6.8 | Oct 29 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations Affected: All versions, or not specified |
| CVE-2026-86849 | 6.5 | Oct 14 | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86856 | 6.5 | Oct 14 | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver Affected: All versions, or not specified |
| CVE-2026-86847 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup Affected: All versions, or not specified |
| CVE-2026-86846 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86845 | 6.5 | Oct 14 | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup Affected: All versions, or not specified |
| CVE-2026-86566 | 6.5 | Oct 14 | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) Affected: All versions, or not specified |
| CVE-2026-86561 | 6.5 | Oct 14 | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup Affected: All versions, or not specified |
| CVE-2021-4472 | 6.5 | Nov 26 | Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature Affected: All versions, or not specified |
| CVE-2024-2182 | 6.5 | Mar 12 | Ovn: insufficient validation of bfd packets may lead to denial of service Affected: All versions, or not specified |
| CVE-2026-93683 | 6.4 | Oct 14 | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou Affected: All versions, or not specified |
| CVE-2023-1932 | 6.1 | Nov 7 | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss Affected: All versions, or not specified |
| CVE-2026-34956 | 5.9 | May 5 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command Affected: All versions, or not specified |
| CVE-2023-1633 | 5.5 | Sep 24 | Insecure barbican configuration file leaking credential Affected: All versions, or not specified |
| CVE-2026-93007 New | 5.3 | Oct 29 | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation Affected: All versions, or not specified |
| CVE-2026-93011 New | 5.3 | Oct 29 | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms Affected: All versions, or not specified |
| CVE-2023-3153 | 5.3 | Oct 4 | Service monitor mac flow is not rate limited Affected: All versions, or not specified |
| CVE-2024-7319 | 5.0 | Aug 2 | Openstack-heat: incomplete fix for cve-2023-1625 Affected: All versions, or not specified |
| CVE-2023-1625 | 5.0 | Sep 24 | Information leak in api Affected: All versions, or not specified |
| CVE-2026-93009 New | 4.3 | Oct 29 | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder Affected: All versions, or not specified |
| CVE-2026-93010 New | 4.3 | Oct 29 | Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check Affected: All versions, or not specified |
Showing 22
