Resource exhaustion in Openstack Horizon

CVE-2014-8124

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.029 (85.2th percentile) — read the EPSS interpretation.

Affected products

Openstack Horizon
Oracle Solaris — versions 11.2
Fedoraproject Fedora — versions 21
Opensuse — versions 13.1
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link)
secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)