Known vulnerabilities in openstack-ironic (Red Hat package)
Vendor:
Red Hat Inc.
Software:
openstack-ironic (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openstack-ironic_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
86
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
17.1.1-17.1.20260721220909.c31db88.el9ost
21.4.5-18.0.20260616204937.9213ccd.el9ost
17.1.1-17.1.20241122190825.c31db88.el9ost
21.4.5-18.0.20241207142602.9213ccd.el9ost
13.0.8-2.20230713045150.d10fd5c.el8ost
17.1.1-17.1.20240917210749.c31db88.el9ost
21.0.1-0.20240913135525.114badc.el9
21.3.1-0.20240911165036.c0d61d0.el9
23.1.1-0.20240405121030.2c16b52.el9
21.3.1-0.20231106145533.e53dc4f.el9
21.3.1-0.20230706125653.c8f8157.el9
20.2.1-0.20230605115028.483a7f9.el8
21.0.1-0.20230510075533.c4154f7.el9
21.3.1-0.20230510075528.b3c902e.el9
21.2.0-0.20221209211422.b70b418.el9
16.0.4-0.20210203051223.7d74ea0.el8
13.0.3-0.20191202201522.cfa58af.el8ost
15.2.1-0.20200929104811.fb90ed4.el8ost
21.0.1-0.20221114235951.fe64d5e.el9
19.0.1-0.20220907234401.d85d7f8.el8
20.2.1-0.20220902195023.ab80152.el8
20.2.1-0.20220628175043.b5ed57a.el8
19.0.1-0.20220712154507.f14c488.el8
19.0.1-0.20220120204037.438b8af.el8
18.1.1-0.20211019162143.e0437cd.el8
18.1.1-0.20211006122217.5134847.el8
18.1.1-0.20210812092216.4aec741.el8
17.0.4-0.20210730151213.5b801be.el8
17.0.4-0.20210713221218.a415e7e.el8
16.0.4-0.20210510131210.6787142.el8
2015.1.2-4.el7ost
4.2.5-1.el7ost
2015.1.2-6.el7
2015.1.2-5.el7
2015.1.2-4.el7
2015.1.2-3.el7
2015.1.2-2.el7
2015.1.1-6.el7
2015.1.1-4.el7
2015.1.0-9.el7
2014.2-3.el7
11.1.2-3.el7
11.1.2-1.el7
10.1.10-1.el7
10.1.9-1.el7
10.1.8-5.el7
10.1.8-4.el7
10.1.8-2.el7
10.1.7-1.el7
10.1.6-4.el7
10.1.6-2.el7
10.1.3-5.el7
10.1.2-4.el7
9.1.4-2.el7
9.1.3-1.el7
9.1.2-3.el7
7.0.4-1.el7
7.0.3-2.el7
7.0.2-3.el7
7.0.2-2.el7
7.0.2-1.el7
7.0.1-1.el7
6.2.4-3.el7
6.2.4-2.el7
6.2.4-1.el7
6.2.3-1.el7
6.2.2-4.el7
6.2.2-3.el7
6.2.2-2.el7
5.1.3-2.el7
5.1.3-1.el7
5.1.2-3.el7
4.2.5-3.el7
4.2.5-2.el7
4.2.5-1.el7
4.2.3-1.el7
4.2.2-4.el7
Vulnerabilities (86)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 17.1.1-17.1.20260721220909.c31db88.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 17.1.1-17.1.20260721220909.c31db88.el9ost | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 17.1.1-17.1.20260721220909.c31db88.el9ost | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 63 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 17.1.1-17.1.20260721220909.c31db88.el9ost | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 17.1.1-17.1.20260721220909.c31db88.el9ost | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 145 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 17.1.1-17.1.20260721220909.c31db88.el9ost | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 118 more |
||
| #VU122995 - Allocation of Resources Without Limits or Throttling CVE-2026-24708 |
CWE-770 | Low | 17.1.1-17.1.20260721220909.c31db88.el9ost | 17.02.2026 |
SB2026021762 SB2026021847 SB2026022004 and 2 more |
||
| #VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676 |
CWE-61 | Low | 21.0.1-0.20240913135525.114badc.el9 | 18.10.2024 |
SB2024101822 SB2024101823 SB2024101824 and 54 more |
||
| #VU98141 - Improper input validation CVE-2024-9341 |
CWE-20 | Low | 21.0.1-0.20240913135525.114badc.el9 | 08.10.2024 |
SB2024100842 SB2024100843 SB2024100848 and 44 more |
||
| #VU98123 - Improper Validation of Integrity Check Value CVE-2024-47211 |
CWE-354 | Medium | 17.1.1-17.1.20241122190825.c31db88.el9ost, 21.4.5-18.0.20241207142602.9213ccd.el9ost | 08.10.2024 |
SB2024100260 SB2024102305 SB2024103012 and 2 more |
||
| #VU97965 - Improper Access Control CVE-2024-44082 |
CWE-284 | Low | 13.0.8-2.20230713045150.d10fd5c.el8ost, 17.1.1-17.1.20240917210749.c31db88.el9ost, 21.0.1-0.20240913135525.114badc.el9, 21.3.1-0.20240911165036.c0d61d0.el9 | 02.10.2024 |
SB2024100260 SB2024100261 SB2024100262 and 10 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 21.0.1-0.20240913135525.114badc.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 21.0.1-0.20240913135525.114badc.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 21.0.1-0.20240913135525.114badc.el9 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU96055 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-42353 |
CWE-601 | Low | 21.3.1-0.20240911165036.c0d61d0.el9 | 15.08.2024 |
SB2024081552 SB2024081555 SB2024081556 and 44 more |
||
| #VU89685 - Improper Validation of Integrity Check Value CVE-2024-3727 |
CWE-354 | Medium | 21.3.1-0.20240911165036.c0d61d0.el9 | 21.05.2024 |
SB2024052112 SB2024052116 SB2024052117 and 68 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 23.1.1-0.20240405121030.2c16b52.el9 | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 21.3.1-0.20231106145533.e53dc4f.el9 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 21.3.1-0.20231106145533.e53dc4f.el9 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-24539 |
CWE-79 | Medium | 21.3.1-0.20230706125653.c8f8157.el9 | 08.05.2023 |
SB2023050814 SB2023050817 SB2023050825 and 75 more |
Showing elements 1 - 20 out of 86