[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK_5jK9KPi-FIC9PGdy1hWA-XQON6S2jObtwMZS3D1d0":3,"g5a-ex:redhat\u002Fopenstack@*":205,"g5a-family:redhat\u002Fopenstack":207},{"success":4,"data":5},true,{"product":6,"versions":92,"topVulnerabilitiesByEpss":123,"kevVulnerabilities":183,"seoMetadata":184,"meta":203},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":91},"redhat","openstack",30,213,0,"2023-05-12",[14,18,21,23,25,28,30,33,35,38,40,43,45,48,50,52,55,58,61,63,65,68,71,74,77,80,82,84,87,89],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"10",70,{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},"10.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},"10.0.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"11",25,{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"11.0",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"12",38,{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"12.0",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"13",61,{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"13.0",{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"14",16,{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"14.0",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"15",11,{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},"15.0",{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},"16.0",{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},"16.1",12,{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},"16.2",9,{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},"17",2,{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},"2.1",{"version":66,"cve_count":67,"kev_count":11,"has_kev":17},"3.0",19,{"version":69,"cve_count":70,"kev_count":11,"has_kev":17},"4.0",18,{"version":72,"cve_count":73,"kev_count":11,"has_kev":17},"5.0",32,{"version":75,"cve_count":76,"kev_count":11,"has_kev":17},"6.0",40,{"version":78,"cve_count":79,"kev_count":11,"has_kev":17},"7.0",43,{"version":81,"cve_count":76,"kev_count":11,"has_kev":17},"8",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"8.0",{"version":85,"cve_count":86,"kev_count":11,"has_kev":17},"9",41,{"version":88,"cve_count":11,"kev_count":11,"has_kev":17},"9.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},"9.0.0","Openstack by Redhat is a technology product with 30 tracked versions and 213 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},{"version":66,"cve_count":67,"kev_count":11,"has_kev":17},{"version":69,"cve_count":70,"kev_count":11,"has_kev":17},{"version":72,"cve_count":73,"kev_count":11,"has_kev":17},{"version":75,"cve_count":76,"kev_count":11,"has_kev":17},{"version":78,"cve_count":79,"kev_count":11,"has_kev":17},{"version":81,"cve_count":76,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},{"version":85,"cve_count":86,"kev_count":11,"has_kev":17},{"version":88,"cve_count":11,"kev_count":11,"has_kev":17},{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},[124,132,138,143,147,154,161,166,172,179],{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":131},"CVE-2020-9490","Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP\u002F2 request would result in a crash when the server actually tries to HTTP\u002F2 PUSH a resource afterwards. Configuring the HTTP\u002F2 feature via \"H2Push off\" will mitigate this vulnerability for unpatched servers.","2020-08-07",7.5,"v3.1","High",0.88844,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":128,"cvssVersion":136,"severity":130,"isKev":17,"epssScore":137},"CVE-2018-1000115","Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.","2018-03-05","v3.0",0.88114,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":142},"CVE-2019-9515","Some HTTP\u002F2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.","2019-08-13",0.87399,{"cveId":144,"description":145,"publishedDate":141,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":146},"CVE-2019-9514","Some HTTP\u002F2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.",0.82813,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":136,"severity":152,"isKev":17,"epssScore":153},"CVE-2016-6662","Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.","2016-09-20",9.8,"Critical",0.6773,{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"cvssVersion":129,"severity":159,"isKev":17,"epssScore":160},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","2018-05-22",5.5,"Medium",0.60631,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":151,"cvssVersion":136,"severity":152,"isKev":17,"epssScore":165},"CVE-2018-11218","Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.","2018-06-17",0.59006,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":171},"CVE-2019-10192","A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","2019-07-11",7.2,0.26048,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"cvssVersion":177,"severity":159,"isKev":17,"epssScore":178},"CVE-2013-2121","Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.","2013-07-31",6,"v2",0.24782,{"cveId":180,"description":181,"publishedDate":169,"cvssScore":170,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":182},"CVE-2019-10193","A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.",0.23703,[],{"title":185,"metaDescription":186,"keywords":187,"structuredData":188},"Openstack by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openstack by Redhat covering 30 versions with 213 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openstack vulnerabilities, Openstack security, Openstack CVE, Redhat Openstack, Openstack threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":189,"@type":190,"name":191,"description":186,"url":192,"manufacturer":193,"applicationCategory":197,"softwareVersion":198,"mainEntity":199},"https:\u002F\u002Fschema.org","SoftwareApplication","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenstack",{"@type":194,"name":195,"url":196},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","30 versions tracked",{"@type":200,"name":201,"description":202,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openstack Security Vulnerabilities","Security vulnerabilities affecting Openstack by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":204,"apiVersion":66},"2026-10-17T12:16:10.135Z",{"rows":206,"total":11,"capped":17,"failed":11},[],[208,211,214,217,219],{"product":209,"cves":210},"openstack_platform",37,{"product":212,"cves":213},"openstack_for_ibm_power",5,{"product":215,"cves":216},"openstack_essex",3,{"product":218,"cves":60},"openstack_folsom",{"product":220,"cves":16},"openstack_foreman"]