The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when
    DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of
    service (excessive database lookup calls and server hang) via a request with many repeated IDs in the
    os:scheduler_hints section. (CVE-2012-3371)

- Enable auto cleanup of old cached instance images

    - Fix ram_allocation_ratio based over subscription

    - Expose over quota exceptions via native API

    - Return 413 status on over quota in the native API

    - Fix call to network_get_all_by_uuids

    - Fix libvirt get_memory_mb_total with xen

    - Use compute_api.get_all in affinity filters       (CVE-2012-3371)

    - Use default qemu img cluster size in libvirt connect

    - Ensure libguestfs has completed before proceeding

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Dan Prince discovered that the Nova scheduler, when using DifferentHostFilter or SameHostFilter, would make repeated database instance lookup calls based on passed scheduler hints. An authenticated attacker could use this to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
433060	SCA: security update for Nova (GHSA-xxgm-qpj5-4886)	Tenable Cloud Security	SCA Checks	high
433060	SCA: security update for Nova (GHSA-xxgm-qpj5-4886)	Tenable Self-Hosted Container Security	SCA Checks	high
60149	Fedora 17 : openstack-nova-2012.1.1-4.fc17 (2012-10939)	Nessus	Fedora Local Security Checks	low
59954	Ubuntu 12.04 LTS : nova vulnerability (USN-1501-1)	Nessus	Ubuntu Local Security Checks	low

Detections

Analytics

CVE-2012-3371

high

Tenable Plugins

high

high

low

low