Known vulnerabilities in openstack-cinder (Red Hat package)
Vendor:
Red Hat Inc.
Software:
openstack-cinder (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openstack-cinder_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
18.2.2-17.1.20260702111621.f6b44fc.el9ost
2014.1.3-1.el7ost
2013.1.5-2.el6ost
2013.1.3-2.el6ost
15.4.0-1.20230510003501.58f0e73.el8ost
18.2.1-0.20230509200451.1776695.el9ost
15.6.1-2.20230310075425.a19c1c9.el8ost
12.0.10-27.el7ost
15.4.0-1.20230206163350.58f0e73.el8ost
15.6.1-2.20221003154726.87578a0.el8ost
18.2.1-0.20230202190311.1776695.el9ost
15.0.2-0.20200123220928.900f769.el8ost
12.0.10-19.el7ost
15.3.1-1.20200914173114.00ac80b.el8ost
9.1.4-50.el7ost
12.0.4-2.el7ost
2012.2.3-4.el6ost
2014.1.3-1.el6ost
2014.1.4-1.1.el6ost
8.1.1-4.el7ost
7.0.3-1.el7ost
2014.1.5-9.el7ost
2014.2.4-11.el7ost
2014.1.5-9.el6ost
2015.1.3-12.el7ost
2015.1.3-14.el7
2015.1.3-13.el7
2015.1.3-12.el7
2015.1.3-8.el7
2015.1.3-5.el7
2015.1.2-5.el7
2015.1.1-2.el7
2015.1.1-1.el7
2015.1.0-5.el7
2015.1.0-3.el7
2014.2.4-11.el7
2014.2.4-8.el7
2014.2.4-7.el7
2014.2.4-6.el7
2014.2.4-2.el7
2014.2.3-11.el7
2014.2.3-6.el7
2014.2.3-3.el7
2014.2.2-2.el7
2014.2.2-1.el7
2014.2.1-3.el7
2014.2.1-1.el7
2014.1.5-9.el7
2014.1.5-8.el7
2014.1.5-4.el7
2014.1.5-1.el7
2014.1.4-1.el7
2014.1.3-2.el7
2014.1.3-1.el7
2014.1.2-2.el7
2014.1.1-1.el7
2014.1-7.el7
13.0.5-7.el7
13.0.5-5.el7
13.0.5-3.el7
13.0.3-2.el7
12.0.10-2.el7
12.0.8-3.el7
12.0.7-5.el7
12.0.7-2.el7
12.0.6-3.el7
12.0.4-8.el7
12.0.4-3.el7
12.0.4-2.el7
12.0.3-2.el7
11.1.0-22.el7
11.1.0-14.el7
11.1.0-1.el7
11.0.1-2.el7
11.0.1-1.el7
10.0.6-25.el7
10.0.6-9.el7
10.0.6-1.el7
10.0.4-3.el7
10.0.3-2.el7
10.0.1-1.el7
9.1.4-53.el7
9.1.4-52.el7
9.1.4-50.el7
9.1.4-44.el7
9.1.4-41.el7
9.1.4-33.el7
9.1.4-24.el7
9.1.4-12.el7
9.1.4-9.el7
9.1.4-6.el7
9.1.4-3.el7
9.1.1-3.el7
9.0.0-13.el7
8.1.1-20.el7
8.1.1-16.el7
8.1.1-13.el7
8.1.1-11.el7
8.1.1-10.el7
8.1.1-9.el7
8.1.1-5.el7
8.1.1-4.el7
8.1.1-1.el7
8.1.0-1.el7
8.0.0-5.el7
7.0.3-15.el7
7.0.3-13.el7
7.0.3-10.el7
7.0.3-9.el7
7.0.3-7.el7
7.0.3-6.el7
7.0.3-4.el7
7.0.3-3.el7
7.0.3-1.el7
7.0.2-4.el7
7.0.2-3.el7
7.0.2-2.el7
7.0.1-8.el7
2014.1.5-9.el6
2014.1.5-8.el6
2014.1.5-4.el6
2014.1.5-1.el6
2014.1.4-1.el6
2014.1.3-2.el6
2014.1.3-1.el6
2014.1.2-3.el6
2014.1.2-2.el6
2014.1.1-1.el6
2013.2.4-2.el6
2013.2.4-1.el6
2013.2.3-3.el6
2013.2.3-2.el6
2013.2.2-2.el6
2013.2.2-1.el6
2013.2.1-5.el6
2013.2-9.el6
2013.1.5-2.el6
2013.1.4-6.el6
2013.1.4-4.el6
2013.1.3-2.el6
2013.1.2-3.el6
2013.1.1-4.el6
2013.1.1-1.el6
2012.2.4-4.el6
2012.2.4-3.el6
2012.2.3-7.el6
2012.2.3-6.el6
2012.2.3-4.el6
2012.2.3-2.el6
2012.2.1-7.el6
2012.2.1-1.el6
2012.2-4.el6
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 63 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 144 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 118 more |
||
| #VU122995 - Allocation of Resources Without Limits or Throttling CVE-2026-24708 |
CWE-770 | Low | 18.2.2-17.1.20260702111621.f6b44fc.el9ost | 17.02.2026 |
SB2026021762 SB2026021847 SB2026022004 and 2 more |
||
| #VU76039 - Permissions, Privileges, and Access Controls CVE-2023-2088 |
CWE-264 | Low | 15.4.0-1.20230510003501.58f0e73.el8ost, 15.6.1-2.20230310075425.a19c1c9.el8ost, 18.2.1-0.20230509200451.1776695.el9ost | 11.05.2023 |
SB2023051132 SB2023051142 SB2023051143 and 7 more |
||
| #VU71714 - External Control of File Name or Path CVE-2022-47951 |
CWE-73 | Medium | 12.0.10-27.el7ost, 15.4.0-1.20230206163350.58f0e73.el8ost, 15.6.1-2.20221003154726.87578a0.el8ost, 18.2.1-0.20230202190311.1776695.el9ost | 31.01.2023 |
SB2023013129 SB2023013130 SB2023013131 and 15 more |