Kurz gesagt
- CVE-2012-2101 ist eine Schwachstelle (NIEDRIG (CVSS 3.5)) in nova, nova (openstack).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 73.6% aller Schwachstellen.
- Abhilfe: auf 12.0.0a0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| nova PyPI | < 12.0.0a0all versions
| 12.0.0a0
|
| nova | = 2011.3= 2012.1= folsom
| No fix yet |
Description
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
NVD description
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free