Vulnerabilities

TI-2024-04128 CVE-2024-4438 · GHSA-5m7g-hw7h-q4qh

Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform

LOW 34

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2024-05-08 Partial fix · 3.3.23, 3.3.23-16.el8ost +1 CWE-400

TI-2024-04127 CVE-2024-4437 · GHSA-qv84-5j9v-4hj7

MEDIUM 40

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00768 Published 2024-05-08 Partial fix · 3.3.23, 3.3.23-16.el8ost CWE-400

TI-2024-04126 CVE-2024-4436 · GHSA-qghw-hwm7-fw74

MEDIUM 40

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00768 Published 2024-05-08 Partial fix · etcd-3.3.23-16.el8ost, 3.3.23-16.el8ost CWE-400