CVE-2023-5625: fallo de gravedad media en Red Hat Ironic content for Red Hat OpenShift…
Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Red Hat OpenStack Platform+ Monitorear Ironic content for Red Hat OpenShift Container Platform
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 1.0%
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
Red Hat · Ironic content for Red Hat OpenShift Container Platform 4.12Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 8Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 9CVEs relacionadas — Red Hat Ironic content for Red Hat OpenShift…
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-1394HIGHGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsEPSS 1.5%CVE-2024-4438HIGHEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformEPSS 0.8%CVE-2023-6110MEDIUMOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeEPSS 0.5%CVE-2024-8007HIGHOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrorsEPSS 0.4%CVE-2026-114406MEDIUMCa-certificates: distrust emudhra intermediate ca certificates due to security concernsEPSS 0.3%CVE-2024-9902MEDIUMAnsible-core: ansible-core user may read/write unauthorized contentEPSS 0.3%