medium6.5
CVE-2023-3637
Denial of service in neutron
Impact
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | neutron | <= 22.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openstack Platform | Versions 13.0, 16.2 |