Lookup for vulnerable packages by Package URL.
| Purl | pkg:pypi/neutron@20.0.0.0rc1 |
| Type | pypi |
| Namespace | |
| Name | neutron |
| Version | 20.0.0.0rc1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 7.0.0a0 |
| Latest_non_vulnerable_version | 2015.1.1 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-ecp9-x6p6-7fa2 |
| vulnerability_id |
VCID-ecp9-x6p6-7fa2 |
| summary |
openstack-neutron uncontrolled resource consumption flaw
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2022-3277, GHSA-w446-h7vg-wv3p
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ecp9-x6p6-7fa2 |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:pypi/neutron@20.0.0.0rc1 |