Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-W446-H7VG-WV3P
HistoryMar 07, 2023 - 12:30 a.m.

openstack-neutron uncontrolled resource consumption flaw

2023-03-0700:30:25
CWE-400
GitHub Advisory Database
github.com
7
openstack
neutron
resource consumption
flaw
unauthorized queries
denial of service

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user’s quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected configurations

Vulners
Node
openstackneutronRange20.0.0.0rc1–20.3.0
OR
openstackneutronRange<18.6.0
OR
openstackneutronRange19.0.0.0rc1–19.5.0
VendorProductVersionCPE
openstackneutron*cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*

Related

nvd 1
redhat 4
nessus 5
cvelist 2
ubuntucve 2
osv 3
prion 1
debiancve 1
redhatcve 2
cve 2
veracode 1
vulnrichment 1
ubuntu 1
openvas 1
nvd
nvd
CVE-2022-3277
2023-03-06 23:15:10
redhat
redhat
(RHSA-2022:8870) Moderate: Red Hat OpenStack Platform 16.1.9 (openstack-neutron) security update
2022-12-07 20:09:56
(RHSA-2023:0275) Moderate: Red Hat OpenStack Platform 17.0 (openstack-neutron) security update
2023-01-25 12:15:19
(RHSA-2022:8855) Moderate: Red Hat OpenStack Platform 16.2.4 (openstack-neutron) security update
2022-12-07 19:00:50
nessus
nessus
RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-neutron) (RHSA-2023:0275)
2024-04-28 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.2.4 (openstack-neutron) (RHSA-2022:8855)
2023-01-23 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1.9 (openstack-neutron) (RHSA-2022:8870)
2023-01-23 00:00:00
cvelist
cvelist
CVE-2022-3277
2023-03-06 00:00:00
CVE-2023-3637 Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)
2023-07-25 12:47:31
ubuntucve
ubuntucve
CVE-2022-3277
2023-03-06 00:00:00
CVE-2023-3637
2023-07-25 00:00:00
osv
osv
CVE-2022-3277
2023-03-06 23:15:10
openstack-neutron uncontrolled resource consumption flaw
2023-03-07 00:30:25
neutron vulnerabilities
2023-05-10 11:30:08
prion
prion
Code injection
2023-03-06 23:15:00
debiancve
debiancve
CVE-2022-3277
2023-03-06 23:15:10
redhatcve
redhatcve
CVE-2022-3277
2022-09-22 20:48:47
CVE-2023-3637
2023-07-25 04:47:00
cve
cve
CVE-2022-3277
2023-03-06 23:15:10
CVE-2023-3637
2023-07-25 13:15:10
veracode
veracode
Denial Of Service (DoS)
2023-01-25 00:46:24
vulnrichment
vulnrichment
CVE-2023-3637 Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)
2023-07-25 12:47:31
ubuntu
ubuntu
OpenStack Neutron vulnerabilities
2023-05-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6067-1)
2023-05-11 00:00:00

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON
Related for GHSA-W446-H7VG-WV3P
nvd1redhat4nessus5cvelist2ubuntucve2osv3prion1debiancve1redhatcve2cve2veracode1vulnrichment1ubuntu1openvas1