CVE-2012-2101: Low severity openstack compute (nova) vulnerability
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2101?
CVE-2012-2101 has a moderate severity level due to its potential to cause a denial of service.
How do I fix CVE-2012-2101?
To fix CVE-2012-2101, upgrade to a version of OpenStack Nova greater than 12.0.0a0.
Which versions of OpenStack Nova are affected by CVE-2012-2101?
CVE-2012-2101 affects OpenStack Nova versions 2011.3 and 2012.1, as well as the Folsom release.
What type of vulnerability is CVE-2012-2101?
CVE-2012-2101 is a denial of service vulnerability that allows resource exhaustion through excessive iptables rules.
Are there known exploits for CVE-2012-2101?
While specific known exploits for CVE-2012-2101 are not publicly documented, the issue allows authenticated users to exploit the denial of service.