CVE-2014-8124: Fedoraproject Fedora

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Affected products

• Fedoraproject Fedora: version 21 only
• Openstack Horizon: from 2014.1, before 2014.1.3 (fixed in 2014.1.3); from 2014.2.0, before 2014.2.1 (fixed in 2014.2.1)
• Opensuse Opensuse: version 13.1 only
• Oracle Solaris: version 11.2 only

Published 2014-12-12. Last modified 2026-06-17.