GitHub Advisoryadvisory · PyPI

GHSA-xxgm-qpj5-4886 OpenStack Nova Scheduler denial of service through scheduler_hints

LOW Published 2022-05-17 Modified 2024-11-22 Official page ↗
Aliases
CVE-2012-3371
Ecosystem
PyPI
Packages
Nova
Severity
Low
Weaknesses
CWE-20
Reviewed
2024-01-12

Affected packages

• PyPI Nova: < 12.0.0a0 → fixed in 12.0.0a0

Description

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.

Related

Alias · CVE (1)

  • CVE-2012-3371 The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled,… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References