An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "neutron-plugin-linuxbridge-agent": "2:12.1.1-0ubuntu8.1", "neutron-macvtap-agent": "2:12.1.1-0ubuntu8.1", "neutron-common": "2:12.1.1-0ubuntu8.1", "neutron-metering-agent": "2:12.1.1-0ubuntu8.1", "neutron-openvswitch-agent": "2:12.1.1-0ubuntu8.1", "neutron-linuxbridge-agent": "2:12.1.1-0ubuntu8.1", "neutron-l3-agent": "2:12.1.1-0ubuntu8.1", "neutron-plugin-sriov-agent": "2:12.1.1-0ubuntu8.1", "neutron-dhcp-agent": "2:12.1.1-0ubuntu8.1", "python-neutron": "2:12.1.1-0ubuntu8.1", "neutron-plugin-openvswitch-agent": "2:12.1.1-0ubuntu8.1", "neutron-server": "2:12.1.1-0ubuntu8.1", "neutron-sriov-agent": "2:12.1.1-0ubuntu8.1", "neutron-metadata-agent": "2:12.1.1-0ubuntu8.1", "neutron-plugin-ml2": "2:12.1.1-0ubuntu8.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "python3-neutron": "2:16.4.2-0ubuntu6.2", "neutron-metadata-agent": "2:16.4.2-0ubuntu6.2", "neutron-linuxbridge-agent": "2:16.4.2-0ubuntu6.2", "neutron-l3-agent": "2:16.4.2-0ubuntu6.2", "neutron-macvtap-agent": "2:16.4.2-0ubuntu6.2", "neutron-ovn-metadata-agent": "2:16.4.2-0ubuntu6.2", "neutron-dhcp-agent": "2:16.4.2-0ubuntu6.2", "neutron-server": "2:16.4.2-0ubuntu6.2", "neutron-common": "2:16.4.2-0ubuntu6.2", "neutron-sriov-agent": "2:16.4.2-0ubuntu6.2", "neutron-metering-agent": "2:16.4.2-0ubuntu6.2", "neutron-openvswitch-agent": "2:16.4.2-0ubuntu6.2", "neutron-plugin-ml2": "2:16.4.2-0ubuntu6.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "python3-neutron": "2:20.3.0-0ubuntu1.1", "neutron-metadata-agent": "2:20.3.0-0ubuntu1.1", "neutron-linuxbridge-agent": "2:20.3.0-0ubuntu1.1", "neutron-l3-agent": "2:20.3.0-0ubuntu1.1", "neutron-macvtap-agent": "2:20.3.0-0ubuntu1.1", "neutron-ovn-metadata-agent": "2:20.3.0-0ubuntu1.1", "neutron-dhcp-agent": "2:20.3.0-0ubuntu1.1", "neutron-server": "2:20.3.0-0ubuntu1.1", "neutron-common": "2:20.3.0-0ubuntu1.1", "neutron-sriov-agent": "2:20.3.0-0ubuntu1.1", "neutron-metering-agent": "2:20.3.0-0ubuntu1.1", "neutron-openvswitch-agent": "2:20.3.0-0ubuntu1.1", "neutron-plugin-ml2": "2:20.3.0-0ubuntu1.1" } ] }