GitHub Advisoryadvisory · PyPI

GHSA-ph2h-hh49-vh27 OpenStack Nova Denial of Service in network source security groups

MEDIUM Published 2022-05-14 Modified 2024-05-14 Official page ↗
Aliases
CVE-2013-4185
Ecosystem
PyPI
Packages
nova
Severity
Moderate
Reviewed
2024-05-14

Affected packages

• PyPI nova: < 12.0.0a0 → fixed in 12.0.0a0

Description

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

Related

Alias · CVE (1)

  • CVE-2013-4185 Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle… vulnerability

References