Red Hat Security Advisory

RHSA-2023:3447

Red Hat OpenStack Platform 16.1 (etcd) security update

Released 2023-06-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.1 etcd-3.3.23-14.el8ost

Fixes 2 records

TI-2021-09444 CVE-2021-28235 · GHSA-gmph-wf7j-9gcm

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to…

MEDIUM 52

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01618 Published 2023-04-04 Partial fix CWE-287

TI-2022-20114 CVE-2022-41723 · GHSA-vvpx-j8f3-3w6h

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

MEDIUM 46

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04561 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 +1 CWE-400