CVE-2023-5625mediumCWE-400CWE-770

CVE-2023-5625: falha de média gravidade em Red Hat Ironic content for Red Hat OpenShift…

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat OpenStack Platform+ Monitorar Ironic content for Red Hat OpenShift Container Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 1.0%
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Red Hat · Ironic content for Red Hat OpenShift Container Platform 4.12Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 8Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 9
CVEs relacionadas — Red Hat Ironic content for Red Hat OpenShift…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1394HIGHGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsEPSS 1.5%CVE-2024-4438HIGHEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformEPSS 0.8%CVE-2023-6110MEDIUMOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeEPSS 0.5%CVE-2024-8007HIGHOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrorsEPSS 0.4%CVE-2026-114406MEDIUMCa-certificates: distrust emudhra intermediate ca certificates due to security concernsEPSS 0.3%CVE-2024-9902MEDIUMAnsible-core: ansible-core user may read/write unauthorized contentEPSS 0.3%