Product by Red Hat
Red Hat Openstack Platform 13 (queens)
38 known vulnerabilities in Red Hat Openstack Platform 13 (queens) (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
38
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-3354 | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | 7.5 | |
| Medium | CVE-2013-0270 | Keystone: openstack keystone: denial of service via large http request with long tenant name | 6.5 | |
| High | CVE-2013-0335 | Openstack nova: vnc proxy can connect to the wrong vm | 7.6 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2026-93834 | Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape | 8.8 | |
| Medium | CVE-2012-5571 | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | 5.4 | |
| High | CVE-2026-100236 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | 8.6 | |
| Medium | CVE-2026-93011 | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | 5.3 | |
| High | CVE-2026-86567 | Red Hat Fast Datapath for RHEL 10: Use After Free | 8.8 | |
| High | CVE-2026-86848 | Red Hat Fast Datapath for RHEL 10: Time-of-check Time-of-use (TOCTOU) Race Condition | 8.8 | |
| High | CVE-2026-81627 | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram | 8.2 | |
| High | CVE-2026-86563 | Dpdk: dpdk: double offset bug in vhost log mapping calculation | 7.8 | |
| High | CVE-2026-86562 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | 7.8 | |
| Medium | CVE-2026-93006 | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | 6.8 | |
| Medium | CVE-2026-93007 | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | 5.3 | |
| Medium | CVE-2026-93008 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | 6.8 | |
| High | CVE-2026-86565 | Red Hat Fast Datapath for RHEL 10: Out-of-bounds Write | 6.7 | |
| High | CVE-2023-1625 | Information leak in api | 7.4 | |
| Medium | CVE-2026-86847 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | 6.5 | |
| Medium | CVE-2026-86846 | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto | 6.5 | |
| Medium | CVE-2026-86561 | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup | 6.5 | |
| Medium | CVE-2026-86856 | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver | 6.5 | |
| Medium | CVE-2026-86845 | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup | 6.5 | |
| Medium | CVE-2026-86566 | Red Hat Fast Datapath for RHEL 10: Integer Underflow (Wrap or Wraparound) | 6.5 | |
| Medium | CVE-2026-86849 | Red Hat Fast Datapath for RHEL 10: Out-of-bounds Write | 6.5 |