Vulnerability Details : CVE-2012-2101
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
Vulnerability category: Denial of service
Products affected by CVE-2012-2101
- cpe:2.3:a:openstack:nova:2011.3:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:nova:folsom:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:nova:2012.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2101
1.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2101
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
3.5
|
LOW | AV:N/AC:M/Au:S/C:N/I:N/A:P |
6.8
|
2.9
|
NIST |
CWE ids for CVE-2012-2101
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2101
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/75243
OpenStack Compute quotas denial of service CVE-2012-2101 Vulnerability Report
-
https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
Implement security group quotas. · openstack/nova@1f644d2 · GitHub
-
http://ubuntu.com/usn/usn-1438-1
USN-1438-1: Nova vulnerability | Ubuntu security notices
-
https://bugs.launchpad.net/nova/+bug/969545
Bug #969545 “missing quotas on security group rules” : Bugs : OpenStack Compute (nova)
-
https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
Implement quotas for security groups. · openstack/nova@a67db45 · GitHub
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
[SECURITY] Fedora 17 Update: openstack-nova-2012.1-2.fc17
-
https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
Implement quotas for security groups. · openstack/nova@8c8735a · GitHub
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
[SECURITY] Fedora 16 Update: openstack-nova-2011.3.1-8.fc16
-
https://lists.launchpad.net/openstack/msg10268.html
[OSSA 2012-005] No quota enforced on security group rules : Mailing list archive : openstack team in Launchpad
Jump to