CVE-2023-5625: medium-severity vulnerability in Red Hat Ironic content for Red Hat OpenShift…
Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
Published · Updated
Follow this CVE+ Monitor Red Hat OpenStack Platform+ Monitor Ironic content for Red Hat OpenShift Container Platform
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 1.0%
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Red Hat · Ironic content for Red Hat OpenShift Container Platform 4.12Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 8Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 9Related CVEs — Red Hat Ironic content for Red Hat OpenShift…
In the same product, most dangerous first.
CVE-2024-1394HIGHGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsEPSS 1.5%CVE-2024-4438HIGHEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformEPSS 0.8%CVE-2023-6110MEDIUMOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeEPSS 0.5%CVE-2024-8007HIGHOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrorsEPSS 0.4%CVE-2026-114406MEDIUMCa-certificates: distrust emudhra intermediate ca certificates due to security concernsEPSS 0.3%CVE-2024-9902MEDIUMAnsible-core: ansible-core user may read/write unauthorized contentEPSS 0.3%