Red Hat OpenStack: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 15

• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• High 7.5
  CVE-2023-39325 Public exploit

  HTTP/2 rapid reset can cause excessive work in net/http

  A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 11, 2023
• High 7.5
  CVE-2023-45288 Public exploit EPSS 89%

  HTTP/2 CONTINUATION flood in net/http

  An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 4, 2024
• High 7.5
  CVE-2024-1135

  HTTP Request Smuggling in benoitc/gunicorn

  Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints…

  benoitc benoitc/gunicorn reflex gunicorn Debian Ubuntu Wolfi PyPI
  Apr 16, 2024
• High 7.5
  CVE-2024-1394

  Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

  A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Azure Linux Go
  Mar 21, 2024
• High 7.5
  CVE-2024-24680

  Django denial-of-service attack in the intcomma template filter

  An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

  python-django django python-django py3-django Debian Ubuntu Wolfi PyPI
  Feb 6, 2024
• High 7.5
  CVE-2024-4438

  Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform

  The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2…

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.1
  May 8, 2024
• Medium 5.9
  CVE-2023-48795 Public exploit Scanner template EPSS 94%

  Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

  The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

  zot kubescape kots rust Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  Dec 18, 2023
• Medium 5.5
  CVE-2023-6110

  Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

  A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.1 Debian Ubuntu PyPI
  Nov 17, 2024
• Medium 5.5
  CVE-2023-6725

  Tripleo-ansible: bind keys are world readable

  An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to acces…

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 17.1
  Mar 15, 2024
• Medium 5.5
  CVE-2024-1141

  Glance-store: glance store access key logged in debug log level

  A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.1 Debian Ubuntu PyPI
  Feb 1, 2024
• Medium 5.4
  CVE-2024-22195

  Jinja vulnerable to Cross-Site Scripting (XSS)

  Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

  pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jan 11, 2024
• Medium 4.2
  CVE-2023-45803

  Request body not stripped after redirect in urllib3

  urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body…

  urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Oct 17, 2023
• Unscored —
  CVE-2023-39326

  Denial of service via chunk extensions in net/http

  A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…

  Go standard library net/http/internal katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 6, 2023
• Unscored —
  CVE-2023-45287

  Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

  Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of…

  Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go
  Dec 5, 2023

Revision history

1. 2026-04-15 #11

   Neue Updates von Red Hat aufgenommen

2. 2025-07-24 #10

   Neue Updates von IBM aufgenommen

3. 2025-02-05 #9

   Neue Updates von Red Hat aufgenommen

4. 2024-11-25 #8

   Neue Updates von Red Hat aufgenommen

5. 2024-11-06 #7

   Neue Updates von Red Hat aufgenommen

6. 2024-10-10 #6

   Neue Updates von Red Hat aufgenommen

7. 2024-06-23 #5

   Neue Updates von Red Hat aufgenommen

8. 2024-06-11 #4

   Neue Updates von Red Hat aufgenommen

9. 2024-05-30 #3

   Neue Updates von Red Hat aufgenommen

10. 2024-05-23 #2

    Neue Updates von Red Hat aufgenommen

11. 2024-05-22 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2024:2727 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2727
• Red Hat Security Advisory RHSA-2024:2729 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2729
• Red Hat Security Advisory RHSA-2024:2730 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2730
• Red Hat Security Advisory RHSA-2024:2767 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2767
• Red Hat Security Advisory RHSA-2024:2731 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2731
• Red Hat Security Advisory RHSA-2024:2732 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2732
• Red Hat Security Advisory RHSA-2024:2733 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2733
• Red Hat Security Advisory RHSA-2024:2734 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2734
• Red Hat Security Advisory RHSA-2024:2735 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2735
• Red Hat Security Advisory RHSA-2024:2768 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2768
• Red Hat Security Advisory RHSA-2024:2736 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2736
• Red Hat Security Advisory RHSA-2024:2770 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2770
• Red Hat Security Advisory RHSA-2024:2737 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2737
• Red Hat Security Advisory RHSA-2024:2769 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2769
• Red Hat Security Advisory RHSA-2024:3352 vom 2024-05-23
  https://access.redhat.com/errata/RHSA-2024:3352
• Red Hat Security Advisory RHSA-2024:3327 vom 2024-05-29
  https://access.redhat.com/errata/RHSA-2024:3327
• Red Hat Security Advisory RHSA-2024:3331 vom 2024-05-30
  https://access.redhat.com/errata/RHSA-2024:3331
• Red Hat Security Advisory RHSA-2024:3467 vom 2024-05-29
  https://access.redhat.com/errata/RHSA-2024:3467
• Red Hat Security Advisory RHSA-2024:3713 vom 2024-06-12
  https://access.redhat.com/errata/RHSA-2024:3713
• Red Hat Security Advisory RHSA-2024:4054 vom 2024-06-24
  https://access.redhat.com/errata/RHSA-2024:4054
• Red Hat Security Advisory RHSA-2024:7987 vom 2024-10-10
  https://access.redhat.com/errata/RHSA-2024:7987
• Red Hat Security Advisory RHSA-2024:8688 vom 2024-11-06
  https://access.redhat.com/errata/RHSA-2024:8688
• Red Hat Security Advisory RHSA-2024:8692 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:8692
• Red Hat Security Advisory RHSA-2024:10142 vom 2024-11-26
  https://access.redhat.com/errata/RHSA-2024:10142
• Red Hat Security Advisory RHSA-2025:0832 vom 2025-02-06
  https://access.redhat.com/errata/RHSA-2025:0832
• IBM Security Bulletin
  https://www.ibm.com/support/pages/node/7240431
• Red Hat Security Advisory RHSA-2026:8322 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8322