p PatchFirst

CVE-2014-8124

CVE-2014-8124

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

EPSS 2.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • horizon Debian:12

    Affected ranges
    • ECOSYSTEM: < 2014.1.3-6

    Update to 2014.1.3-6

  • horizon Debian:13

    Affected ranges
    • ECOSYSTEM: < 2014.1.3-6

    Update to 2014.1.3-6

  • horizon Debian:14

    Affected ranges
    • ECOSYSTEM: < 2014.1.3-6

    Update to 2014.1.3-6

  • horizon Ubuntu:14.04:LTS

    Versions
    • 1:2013.2~rc3-0ubuntu1
    • 1:2013.2-0ubuntu1
    • 1:2014.1~b1-0ubuntu1
    • 1:2014.1~b2-0ubuntu1
    • 1:2014.1~b2-0ubuntu2
    • 1:2014.1~b3-0ubuntu1
    • 1:2014.1~b3-0ubuntu2
    • 1:2014.1~rc1-0ubuntu1
    • 1:2014.1~rc2-0ubuntu1
    • 1:2014.1-0ubuntu1
    • 1:2014.1.1-0ubuntu1
    • 1:2014.1.2-0ubuntu1
    • 1:2014.1.2-0ubuntu1.1
    • 1:2014.1.3-0ubuntu1
    • 1:2014.1.3-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1:2014.1.4-0ubuntu2

    Update to 1:2014.1.4-0ubuntu2

Original sources

Check your server →