CVE-2012-2101
CVE-2012-2101
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
EPSS 1,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · python
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
nova Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2012.1-2
Actualiza a 2012.1-2
nova Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2012.1-2
Actualiza a 2012.1-2
nova Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2012.1-2
Actualiza a 2012.1-2
nova PyPI
- Intervalos de versiones afectados
- ECOSYSTEM: < 12.0.0a0
Actualiza a 12.0.0a0
Fuentes originales
- https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
- http://www.osvdb.org/81641
- https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
- http://ubuntu.com/usn/usn-1438-1
- https://lists.launchpad.net/openstack/msg10268.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75243
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
- https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
- http://secunia.com/advisories/49048
- https://bugs.launchpad.net/nova/+bug/969545
- http://secunia.com/advisories/49034
- https://nvd.nist.gov/vuln/detail/CVE-2012-2101