medium6.5
CVE-2022-3277
An uncontrolled resource consumption flaw was found in openstack-neutron.
Impact
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Neutron | before 18.6.0 from 19.0.0 before 19.5.0 |
| Redhat | Openstack Platform | Versions 13.0, 16.1, 16.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.launchpad.net/neutron/+bug/1988026
- https://bugzilla.redhat.com/show_bug.cgi?id=2129193
- https://bugs.launchpad.net/neutron/+bug/1988026
- https://bugzilla.redhat.com/show_bug.cgi?id=2129193
- https://bugs.launchpad.net/neutron/+bug/1988026
- https://bugzilla.redhat.com/show_bug.cgi?id=2129193