GitHub Advisory DatabaseGHSA-HQ3F-9GF7-73R8Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
85.9%
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
Affected configurations
References
lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
secunia.com/advisories/49034
secunia.com/advisories/49048
ubuntu.com/usn/usn-1438-1
www.osvdb.org/81641
bugs.launchpad.net/nova/+bug/969545
exchange.xforce.ibmcloud.com/vulnerabilities/75243
github.com/advisories/GHSA-hq3f-9gf7-73r8
github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
lists.launchpad.net/openstack/msg10268.html
nvd.nist.gov/vuln/detail/CVE-2012-2101
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
85.9%