NVD

Id
44968  
Name
CVE-2012-3371  
Description
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-07-17  
Modified Date
2012-08-24  
Seq
2012-3371  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225327 44968 CVE-2012-3371 [oss-security] 20120711 [OSSA 2012-009] Scheduler denial of service through scheduler_hints (CVE-2012-3371)  View
225328 44968 CVE-2012-3371 54388  View
225329 44968 CVE-2012-3371 USN-1501-1  View
225330 44968 CVE-2012-3371 https://bugs.launchpad.net/nova/+bug/1017795  View
225331 44968 CVE-2012-3371 https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d  View
225332 44968 CVE-2012-3371 [openstack] 20120711 [OSSA 2012-009] Scheduler denial of service through scheduler_hints (CVE-2012-3371)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27438 JVNDB-2012-003145 OpenStack Compute (Nova) Folsom および Essex におけるサービス運用妨害 (DoS) の脆弱性 OpenStack Compute (Nova) Folsom (2012.2) および Essex (2012.1) の Nova scheduler は、DifferentHostFilter または SameHostFilter が有効である場合、サービス運用妨害 (データベースの過剰な参照呼出しおよびサーバハング) 状態となる脆弱性が存在します。 CVE-2012-3371 56609 CVE-2012-3371 44968 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003145.html 2012-06-26 2012-07-19 View