CVE-2022-3277
Fixed in a distro release EPSS 1%CVSS 6.5
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
Products: openstack neutron, redhat openstack_platform
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | neutron | 19.5.0 |
| PyPI | neutron | 18.6.0 |
| PyPI | neutron | 20.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2:21.0.0~rc1-3 |
| Debian 13 | neutron | 2:21.0.0~rc1-3 |
| Debian 14 | neutron | 2:21.0.0~rc1-3 |
| Red Hat openstack 16.1 | openstack-neutron | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-common | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-linuxbridge | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-macvtap-agent | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-metering-agent | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-ml2 | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-openvswitch | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-rpc-server | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | openstack-neutron-sriov-nic-agent | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.1 | python3-neutron | 1:15.2.1-1.20221005123225.40d217c.el8ost |
| Red Hat openstack 16.2 | openstack-neutron | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-common | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-linuxbridge | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-macvtap-agent | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-metering-agent | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-ml2 | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-openvswitch | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-rpc-server | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | openstack-neutron-sriov-nic-agent | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 16.2 | python3-neutron | 1:15.3.5-2.20221005184727.c81fb5b.el8ost |
| Red Hat openstack 17.0 | openstack-neutron | 1:18.4.1-0.20221128170741.5258354.el9ost |
| Ubuntu 16.04 LTS | neutron | no fix |
| Ubuntu 18.04 LTS | neutron | 2:12.1.1-0ubuntu8.1 |
| Ubuntu 20.04 LTS | neutron | 2:16.4.2-0ubuntu6.2 |
| Ubuntu 22.04 LTS | neutron | 2:20.3.0-0ubuntu1.1 |