Red Hat Red Hat OpenStack Platform 13 (Queens)
32 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-86849 | | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-86856 | | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86847 | | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86846 | | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86845 | | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86566 | | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86848 | | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto | HIGH 8.8 | 0.1 % | ||
| CVE-2026-86567 | | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | HIGH 8.8 | 0.1 % | ||
| CVE-2026-100236 | | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | HIGH 8.6 | 0.3 % | ||
| CVE-2026-86565 | | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write | HIGH 8.2 | 0.2 % | ||
| CVE-2026-86563 | | Dpdk: dpdk: double offset bug in vhost log mapping calculation | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86562 | | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86561 | | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-93683 | | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-93834 | | Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape | HIGH 8.8 | 0.4 % | ||
| CVE-2026-81627 | | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram | HIGH 8.2 | 0.2 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2021-4472 | | Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-1932 | | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-7319 | | Openstack-heat: incomplete fix for cve-2023-1625 | MEDIUM 5.0 | 0.4 % | ||
| CVE-2024-2182 | | Ovn: insufficient validation of bfd packets may lead to denial of service | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-3153 | | Service monitor mac flow is not rate limited | MEDIUM 5.3 | 1.0 % | ||
| CVE-2023-1633 | | Insecure barbican configuration file leaking credential | MEDIUM 6.6 | 0.2 % | ||
| CVE-2023-1636 | | Incomplete container isolation | MEDIUM 6.0 | 0.5 % | ||
| CVE-2023-1625 | | Information leak in api | HIGH 7.4 | 0.7 % | ||
| CVE-2023-1108 | | Undertow: infinite loop in sslconduit during close | HIGH 7.5 | 1.8 % | ||
| CVE-2023-2680 | | Dma reentrancy issue (incomplete fix for cve-2021-3750) | HIGH 8.2 | 0.2 % | ||
| CVE-2023-3301 | | Triggerable assertion due to race condition in hot-unplug | MEDIUM 5.6 | 0.3 % | ||
| CVE-2023-3354 | | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | HIGH 7.5 | 1.6 % | ||
| CVE-2013-0270 | | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-0335 | | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2012-5571 | | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |