Published: 6 March 2023
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.
This issue was fixed in (2:20.3.0-0ubuntu1) in jammy-proposed, and was later released to -security.
Cvss 3 Severity Score
Severity score breakdown