CVE-2022-3277

Published: Mar 6, 2023Modified: Mar 7, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected (5)

Products: Openstack: Neutron · Redhat: Openstack Platform

1 product

1 product

Openstack Platform

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Openstack Neutron	Before 18.6.0
Openstack Neutron	From 19.0.0 to 19.5.0
Redhat Openstack Platform	Version 13.0
Redhat Openstack Platform	Version 16.1
Redhat Openstack Platform	Version 16.2

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (6)

https://bugs.launchpad.net/neutron/+bug/1988026

Source: secalert@redhat.com

Issue TrackingPatch

https://bugzilla.redhat.com/show_bug.cgi?id=2129193

Source: secalert@redhat.com

Issue TrackingPatchVendor Advisory

https://bugs.launchpad.net/neutron/+bug/1988026

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://bugzilla.redhat.com/show_bug.cgi?id=2129193

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

https://bugs.launchpad.net/neutron/+bug/1988026

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Issue TrackingPatch

https://bugzilla.redhat.com/show_bug.cgi?id=2129193

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.