Known vulnerabilities in openstack-heat (Red Hat package)
Vendor:
Red Hat Inc.
Software:
openstack-heat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openstack-heat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
16.1.1-17.1.20260713101101.edc6d60.el9ost
2013.2.4-1.el6ost
2013.2.1-4.el6ost
13.0.1-0.20191127204014.0703ca7.el8ost
2015.1.4-3.el7ost
5.0.3-2.el7ost
6.1.0-3.el7ost
7.0.2-4.el7ost
2015.1.2-9.el7ost
2014.1.5-7.el6ost
2014.1.5-7.el7ost
2014.2.3-11.el7ost
2015.1.4-3.el7
2015.1.4-2.el7
2015.1.4-1.el7
2015.1.2-10.el7
2015.1.2-9.el7
2015.1.2-4.el7
2015.1.1-7.el7
2015.1.1-6.el7
2015.1.1-5.el7
2015.1.0-6.el7
2015.1.0-4.el7
2014.2.4-3.el7
2014.2.4-2.el7
2014.2.4-1.el7
2014.2.3-11.el7
2014.2.3-9.el7
2014.2.3-8.el7
2014.2.3-6.el7
2014.2.3-5.el7
2014.2.3-1.el7
2014.2.2-1.el7
2014.2.1-3.el7
2014.1.5-7.el7
2014.1.5-3.el7
2014.1.5-2.el7
2014.1.4-1.el7
2014.1.3-2.el7
2014.1.3-1.el7
10.0.3-9.el7
10.0.3-8.el7
10.0.3-6.el7
10.0.3-5.el7
10.0.3-3.el7
10.0.2-5.el7
10.0.2-3.el7
10.0.2-2.el7
10.0.1-2.el7
9.0.5-1.el7
9.0.4-1.el7
9.0.3-1.el7
9.0.1-3.el7
8.0.6-2.el7
8.0.6-1.el7
8.0.4-1.el7
8.0.3-1.el7
8.0.2-2.el7
8.0.0-8.el7
7.0.6-11.el7
7.0.6-9.el7
7.0.6-7.el7
7.0.6-6.el7
7.0.6-5.el7
7.0.6-4.el7
7.0.6-2.el7
7.0.6-1.el7
7.0.5-2.el7
7.0.5-1.el7
7.0.3-1.el7
7.0.2-4.el7
7.0.2-1.el7
7.0.1-2.el7
7.0.0-7.el7
6.1.0-5.el7
6.1.0-4.el7
6.1.0-3.el7
6.1.0-1.el7
6.0.0-12.el7
6.0.0-11.el7
6.0.0-8.el7
5.0.3-2.el7
5.0.1-9.el7
5.0.1-8.el7
5.0.1-6.el7
5.0.1-5.el7
2014.1.5-7.el6
2014.1.5-4.el6
2014.1.5-3.el6
2014.1.4-1.el6
2014.1.3-1.el6
2013.2.4-1.el6
2013.2.3-2.el6
2013.2.3-1.el6
2013.2.2-1.el6
2013.2.1-4.el6
2013.2-4.el6
2013.1.4-2.el6
2013.1.4-1.el6
2013.1.3-1.el6
2013.1.2-4.el6
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 63 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 144 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 118 more |
||
| #VU122995 - Allocation of Resources Without Limits or Throttling CVE-2026-24708 |
CWE-770 | Low | 16.1.1-17.1.20260713101101.edc6d60.el9ost | 17.02.2026 |
SB2026021762 SB2026021847 SB2026022004 and 2 more |