CVE-2022-3277: Openstack Neutron

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

Affected products

• Openstack Neutron: before 18.6.0 (fixed in 18.6.0); from 19.0.0, before 19.5.0 (fixed in 19.5.0)
• Red Hat Openstack Platform: version 13.0 only; version 16.1 only; version 16.2 only

Published 2023-03-06. Last modified 2026-06-17.