Red Hat Security Advisory

RHSA-2018:1593

Red Hat OpenStack Platform director security update

Released 2018-05-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 openstack-tripleo-heat-templates-5.3.10-1.el7ost, puppet-tripleo-5.6.8-6.el7ost

Fixes 2 records

TI-2018-15768 CVE-2018-1000115 · GHSA-f4xm-w85j-gc55

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume…

HIGH 75

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via networ…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.88002 Published 2018-03-05 Partial fix CWE-400

TI-2017-08946 CVE-2017-12155 · GHSA-w8gx-hhcx-px6w

Missing authentication in openstack-tripleo-heat-templates

LOW 28

A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00287 Published 2017-12-12 Partial fix · 7.0.6 CWE-306