CVE-2012-2101: Openstack Compute (Nova) Denial of service… – CVSS 3.5 · Watchpost

← All vulnerabilities

Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

낮음 3.5CVE-2012-2101 · GHSA-hq3f-9gf7-73r8 · PYSEC-2012-36 · Published 07/06/2012 · updated 16/06/2026

요약

CVE-2012-2101은(는) nova, nova (openstack)에 영향을 주는 낮음 (CVSS 3.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.5%, 전체 취약점의 73.6%보다 높음.
조치: 12.0.0a0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
nova PyPI	`< 12.0.0a0all versions`	`12.0.0a0`
nova openstack	`= 2011.3= 2012.1= folsom`	No fix yet

Description

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

NVD description

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

References

nvd.nist.gov/vuln/detail/CVE-2012-2101 · ADVISORY
openstack/nova commit 1f644d2 · WEB
openstack/nova commit 8c8735a · WEB
openstack/nova commit a67db45 · WEB
bugs.launchpad.net/nova/+bug/969545 · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/75243 · WEB
openstack/nova · PACKAGE
pypa/advisory-database · WEB
lists.launchpad.net/openstack/msg10268.html · WEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html · WEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html · WEB

nova의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free