Login Request a demo
Unscored severity · published Jul 17, 2012
CVE-2012-3371
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to…
–
CVSS
1.9%
EPSS
No
On KEV
Description
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Compute · Openstack
2012.2 · source: NVD
ES
Essex · Openstack
2012.1 · source: NVD
FO
Folsom · Openstack
2012.2 · source: NVD
Affected product
CO
Compute
Openstack
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3371
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3371
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/07/11/13
www.securityfocus.com
http://www.securityfocus.com/bid/54388
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1501-1
Exploit
https://bugs.launchpad.net/nova/+bug/1017795
Exploit
https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d
lists.launchpad.net
https://lists.launchpad.net/openstack/msg14452.html
More from Compute
5.9
CVE-2013-2255
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates
4.7
CVE-2015-2687
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for
–
CVE-2014-0134
The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false,…
–
CVE-2014-0167
The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1)…
–
CVE-2014-2573
The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota…