CVE-2024-4437
High
Description
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning it should be updated at compile time instead.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Openstack 16.1
PublishedMay 8, 2024
First seenMay 8, 2024
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack 16.1 | No range specified | — |
| openstack 16.2 | No range specified | — |
| Red Hat Red Hat OpenStack Platform 18.0 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.