Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-3637

Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)

Description

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

  • 1:15.3.5-2.20230216175503.el8ost to < *unaffected

Red Hat Red Hat OpenStack Platform 13 (Queens) Operational Tools

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.1

Default version status: unaffected

Red Hat Red Hat OpenStack Platform 17.0

Default version status: unaffected

Red Hat Red Hat OpenStack Platform 17.1

Default version status: unaffected

Red Hat Red Hat OpenStack Platform 18.0

Default version status: unaffected

References