CVE-2022-3277

Uncontrolled Resource Consumption in pypi/neutron

Identifiers

CVE-2022-3277

Package Slug

pypi/neutron

Vulnerability

Uncontrolled Resource Consumption

Description

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected Versions

All versions before 18.6.0, all versions starting from 19.0.0 before 19.5.0

Solution

Upgrade to versions 18.6.0, 19.5.0 or above.

Last Modified

2023-03-14

source