Vulnerability Details CVE-2023-3637
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.3%
CVSS Severity
CVSS v3 Score 4.3
References
- https://access.redhat.com/errata/RHSA-2023:4283
- https://access.redhat.com/security/cve/CVE-2023-3637
- https://bugzilla.redhat.com/show_bug.cgi?id=2222270
- https://access.redhat.com/errata/RHSA-2023:4283
- https://access.redhat.com/security/cve/CVE-2023-3637
- https://bugzilla.redhat.com/show_bug.cgi?id=2222270
Products affected by CVE-2023-3637
-
cpe:2.3:a:redhat:openstack_platform:13.0
-
cpe:2.3:a:redhat:openstack_platform:16.2