CVE-2018-16856
Fixed in a distro release EPSS <1%CVSS 5.5
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.
Products: openstack octavia, redhat openstack
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | octavia | 2.1.0 |
| PyPI | octavia | 3.1.0 |
| PyPI | octavia | 3.0.2 |
| PyPI | octavia | 2.0.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 13 | openstack-octavia | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-amphora-agent | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-api | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-common | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-debuginfo | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-diskimage-create | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-health-manager | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-housekeeping | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | openstack-octavia-worker | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | python-octavia | 0:2.0.3-2.el7ost |
| Red Hat openstack 13 | python-octavia-tests-golang | 0:2.0.3-2.el7ost |
| Red Hat openstack 14 | openstack-octavia | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-amphora-agent | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-api | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-common | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-debuginfo | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-diskimage-create | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-health-manager | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-housekeeping | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | openstack-octavia-worker | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | python-octavia | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Red Hat openstack 14 | python-octavia-tests-golang | 0:3.0.2-0.20181219195054.ec4c88e.el7ost |
| Ubuntu 20.04 LTS | octavia | no fix |
| Ubuntu 22.04 LTS | octavia | no fix |
| Ubuntu 24.04 LTS | octavia | no fix |
| Ubuntu 25.10 | octavia | no fix |
| Ubuntu 26.04 LTS | octavia | no fix |
| Ubuntu 26.10 | octavia | no fix |