~ / search / GHSA-r3jh-qhgj-gvr8

GHSA-r3jh-qhgj-gvr8

Denial of service in neutron

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-3637

Packages

EcosystemPackageAffectedFixed in
PyPI neutron <= 22.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

References

External links from the advisory. They lead to third-party sites.