openstack-neutron uncontrolled resource consumption flaw
Moderate severity
GitHub Reviewed
Published
Mar 7, 2023
to the GitHub Advisory Database
•
Updated May 14, 2024
Package
Affected versions
>= 19.0.0.0rc1, < 19.5.0
< 18.6.0
>= 20.0.0.0rc1, < 20.3.0
Patched versions
19.5.0
18.6.0
20.3.0
Description
Published by the National Vulnerability Database
Mar 6, 2023
Published to the GitHub Advisory Database
Mar 7, 2023
Reviewed
May 14, 2024
Last updated
May 14, 2024
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
References