Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules,
    which allows remote authenticated users with certain permissions to cause a denial of service (CPU and
    hard drive consumption) via a network request that triggers a large number of iptables rules.
    (CVE-2012-2101)

Dan Prince discovered that Nova did not enforce quotas for security groups and rules added to security groups. An authenticated user could exploit this to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Sync up with Essex stable branch

  - Support more flexible guest image file injection

  - Enforce quota on security group rules (CVE-2012-2101)

  - Provide startup scripts for the Essex VNC services

  - Provide a startup script for the separated metadata api     service update to essex release

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix undefined glance_host in get_glance_client

  - Implement quotas for security groups (CVE-2012-2101)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
433538	SCA: security update for nova (GHSA-hq3f-9gf7-73r8)	Tenable Cloud Security	SCA Checks	Local	high
433538	SCA: security update for nova (GHSA-hq3f-9gf7-73r8)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
58986	Ubuntu 11.10 / 12.04 LTS : nova vulnerability (USN-1438-1)	Nessus	Ubuntu Local Security Checks	Local	low
58959	Fedora 17 : openstack-nova-2012.1-2.fc17 (2012-6273)	Nessus	Fedora Local Security Checks	Local	low
58927	Fedora 16 : openstack-nova-2011.3.1-8.fc16 (2012-6365)	Nessus	Fedora Local Security Checks	Local	low

Detections

Analytics

CVE-2012-2101

high

Tenable Plugins

high

high

low

low

low