← Database

CVE-2022-3277

MEDIUM CVSS: 6.5 Published: 2023-03-06 Modified: 2026-06-17

Description

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected Platforms

Redhat Openstack PlatformOpenstack Neutron

Weakness Type

CWE-400, CWE-400

References