Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-2101US | low3.5 | — | ||
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a d… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.htmlWEB
- http://ubuntu.com/usn/usn-1438-1WEB
- https://bugs.launchpad.net/nova/+bug/969545WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75243WEB
- https://github.com/openstack/novaPACKAGE
- https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7WEB
- https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52bebWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan