Lucene search
GoogleOSV:GHSA-XXGM-QPJ5-4886HistoryMay 17, 2022 - 5:25 a.m.
OpenStack Nova Scheduler denial of service through scheduler_hints
2022-05-1705:25:08
Google
osv.dev
2
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.
References
www.openwall.com/lists/oss-security/2012/07/11/13
www.securityfocus.com/bid/54388
www.ubuntu.com/usn/USN-1501-1
bugs.launchpad.net/nova/+bug/1017795
github.com/openstack/nova
github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d
lists.launchpad.net/openstack/msg14452.html
nvd.nist.gov/vuln/detail/CVE-2012-3371
Related
nessus
nessus
Fedora 17 : openstack-nova-2012.1.1-4.fc17 (2012-10939)
2012-07-30 00:00:00
Ubuntu 12.04 LTS : nova vulnerability (USN-1501-1)
2012-07-12 00:00:00
prion
prion
Design/Logic Flaw
2012-07-17 21:55:00
github
github
OpenStack Nova Scheduler denial of service through scheduler_hints
2022-05-17 05:25:08
cve
cve
CVE-2012-3371
2012-07-17 21:55:02
openvas
openvas
Ubuntu Update for nova USN-1501-1
2012-07-16 00:00:00
Ubuntu: Security Advisory (USN-1501-1)
2012-07-16 00:00:00
Fedora Update for openstack-nova FEDORA-2012-10939
2012-08-30 00:00:00
ubuntu
ubuntu
Nova vulnerability
2012-07-11 00:00:00
cvelist
cvelist
CVE-2012-3371
2012-07-17 21:00:00
debiancve
debiancve
CVE-2012-3371
2012-07-17 21:55:02
nvd
nvd
CVE-2012-3371
2012-07-17 21:55:02
ubuntucve
ubuntucve
CVE-2012-3371
2012-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openstack-nova-2012.1.1-4.fc17
2012-07-29 00:53:08
[SECURITY] Fedora 17 Update: openstack-nova-2012.1.1-15.fc17
2012-08-21 09:53:13
[SECURITY] Fedora 17 Update: openstack-nova-2012.1.3-3.fc17
2013-02-10 04:43:56
securityvulns
securityvulns
Nova security vulnerabilities
2012-08-27 00:00:00