This security bulletin contains one medium risk vulnerability.
Exploit availability: NoDescription
The vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when processing API calls to nonexistent controllers. A remote authenticated user can trigger resource exhaustion by sending multiple API calls and perform a denial of service (DoS) attack.Mitigation
Install updates from vendor's website.Vulnerable software versions
openstack-neutron: 18.0.0 - 18.1.0, 17.0.0 - 17.2.0, 16.0.0 - 16.4.0
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?