CVE-2022-3277

2023-03-0600:00:00

CWE-400

redhat

www.cve.org

openstack-neutron

resource consumption

unauthorized access

denial of service

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user’s quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "openstack-neutron",
    "versions": [
      {
        "version": "As shipped with Red Hat Openstack 13, 16.1, and 16.2",
        "status": "affected"
      }
    ]
  }
]