CVE-2012-3371
CVE-2012-3371
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.
EPSS 1.9% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nova Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1.1-5
Update to 2012.1.1-5
nova Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1.1-5
Update to 2012.1.1-5
nova Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1.1-5
Update to 2012.1.1-5
nova PyPI
- Affected ranges
- ECOSYSTEM: < 12.0.0a0
Update to 12.0.0a0
Original sources
- http://www.securityfocus.com/bid/54388
- https://lists.launchpad.net/openstack/msg14452.html
- https://bugs.launchpad.net/nova/+bug/1017795
- http://www.openwall.com/lists/oss-security/2012/07/11/13
- http://www.ubuntu.com/usn/USN-1501-1
- https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d
- https://nvd.nist.gov/vuln/detail/CVE-2012-3371