Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r3jh-qhgj-gvr8

Опубликовано: 25 июл. 2023
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Denial of service in neutron

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Пакеты

Наименование

neutron

pip
Затронутые версииВерсия исправления

<= 22.0.2

Отсутствует

EPSS

Процентиль: 44%
0.00214
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

CVSS3: 4.3
redhat
больше 2 лет назад

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

CVSS3: 4.3
nvd
больше 2 лет назад

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

CVSS3: 4.3
debian
больше 2 лет назад

An uncontrolled resource consumption flaw was found in openstack-neutr ...

EPSS

Процентиль: 44%
0.00214
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400