PT-2012-6312 · Openstack · Openstack Compute

Publicado 2012-06-07 · Atualizado 2012-06-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Openstack Compute (Nova) versions 2011.3 through 2012.1

Description The issue allows remote authenticated users with certain permissions to cause a denial of service by consuming CPU and hard drive resources via a network request that triggers a large number of iptables rules, due to the lack of limitation on the number of security group rules.

Recommendations For versions 2011.3 through 2012.1, consider implementing a limit on the number of security group rules to prevent excessive resource consumption. As a temporary workaround, restrict access to security group rule management for users with certain permissions to minimize the risk of exploitation.

Identificadores relacionados

PYSEC-2012-36

Produtos afetados

Openstack Compute

Referências · 13

• https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb · Nota
• https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7 · Nota
• https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64 · Nota
• http://secunia.com/advisories/49034 · Nota
• https://bugs.launchpad.net/nova/+bug/969545 · Nota
• http://ubuntu.com/usn/usn-1438-1 · Nota
• http://osvdb.org/81641 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html · Nota
• https://lists.launchpad.net/openstack/msg10268.html · Nota
• https://osv.dev/vulnerability/PYSEC-2012-36 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75243 · Nota
• http://secunia.com/advisories/49048 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html · Nota