CVE-2022-37394

Katalog CVE

CVSS 3.3 · Low EPSS 0,31%

Kerentanan pada openstack nova. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

Rincian

Terbit di NVD

3 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://review.opendev.org/c/openstack/nova/+/849985 patch · advisory pihak ketiga
• https://bugs.launchpad.net/ossa/+bug/1981813 exploit · issue tracking · advisory pihak ketiga
• https://review.opendev.org/c/openstack/nova/+/850003 advisory pihak ketiga