OpenStack Neutron Denial of Service vulnerability
Moderate severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Feb 23, 2024
Package
Affected versions
< 16.4.1
>= 17.0.0, < 17.2.1
>= 18.0.0, < 18.1.1
Patched versions
16.4.1
17.2.1
18.1.1
Description
Published by the National Vulnerability Database
Sep 8, 2021
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Feb 23, 2024
Last updated
Feb 23, 2024
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service.
References