PT-2012-3807 · Openstack · Openstack Compute

Dan Prince · Published 2012-06-07 · Updated 2022-05-17 · CVE-2012-2101

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Openstack Compute (Nova) versions 2011.3 through 2012.1

Description The issue allows remote authenticated users with certain permissions to cause a denial of service by consuming CPU and hard drive resources via a network request that triggers a large number of iptables rules, due to the lack of limitation on the number of security group rules.

Recommendations For versions 2011.3 through 2012.1, consider implementing a limit on the number of security group rules to prevent excessive resource consumption. As a temporary workaround, restrict access to users with permissions that could trigger a large number of iptables rules.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2101

GHSA-HQ3F-9GF7-73R8

PYSEC-2012-36

Affected Products

Openstack Compute

References · 21

• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2101 · Vendor Advisory
• http://secunia.com/advisories/49034 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2012-36 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2101 · Security Note
• http://secunia.com/advisories/49048 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2101 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hq3f-9gf7-73r8 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html · Vendor Advisory
• http://ubuntu.com/usn/usn-1438-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-2101 · Vendor Advisory
• https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7 · Note
• https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64 · Note
• https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb · Note
• https://github.com/openstack/nova · Note