{"id":"CVE-2023-3637","aliases":["EUVD-2023-2132","GHSA-r3jh-qhgj-gvr8","PYSEC-2026-1694","RHSA-2023:4283","UBUNTU-CVE-2023-3637"],"status":"published","title":"Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01305,"percentile":0.70728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2023-07-25T12:47:31Z","modified":"2026-10-28T01:07:25Z","fixes":[{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-common","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-linuxbridge","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-macvtap-agent","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-metering-agent","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-ml2","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-openvswitch","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-rpc-server","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-sriov-nic-agent","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-neutron","fixed_in":["1:15.3.5-2.20230216175503.el8ost"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"22.0.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"22.0.2"}]}],"versions":["0.0","10.0.5","10.0.6","10.0.7","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","12.0.0","12.0.0.0b3","12.0.0.0rc1","12.0.0.0rc2","12.0.1","12.0.2","12.0.3","12.0.4","12.0.5","12.0.6","12.1.0","12.1.1","13.0.0","13.0.0.0b1","13.0.0.0b2","13.0.0.0b3","13.0.0.0rc1","13.0.0.0rc2","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","14.0.0","14.0.0.0b1","14.0.0.0b2","14.0.0.0b3","14.0.0.0rc1","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.3.0","14.3.1","14.4.0","14.4.1","14.4.2","15.0.0","15.0.0.0b1","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.0.2","15.1.0","15.2.0","15.3.0","15.3.1","15.3.2","15.3.3","15.3.4","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.1.0","16.2.0","16.3.0","16.3.1","16.3.2","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.1.0","17.1.1","17.1.2","17.2.0","17.2.1","17.3.0","17.4.0","17.4.1","18.0.0","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.1.1","18.2.0","18.3.0","18.4.0","18.5.0","18.6.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.2.0","19.3.0","19.4.0","19.5.0","19.6.0","19.7.0","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.1.0","20.2.0","20.3.0","20.3.1","20.4.0","20.5.0","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","22.0.0","22.0.0.0rc1","22.0.0.0rc2","22.0.1","22.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"22.0.2"}]}],"versions":["0.0","10.0.5","10.0.6","10.0.7","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","12.0.0","12.0.0.0b3","12.0.0.0rc1","12.0.0.0rc2","12.0.1","12.0.2","12.0.3","12.0.4","12.0.5","12.0.6","12.1.0","12.1.1","13.0.0","13.0.0.0b1","13.0.0.0b2","13.0.0.0b3","13.0.0.0rc1","13.0.0.0rc2","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","14.0.0","14.0.0.0b1","14.0.0.0b2","14.0.0.0b3","14.0.0.0rc1","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.3.0","14.3.1","14.4.0","14.4.1","14.4.2","15.0.0","15.0.0.0b1","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.0.2","15.1.0","15.2.0","15.3.0","15.3.1","15.3.2","15.3.3","15.3.4","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.1.0","16.2.0","16.3.0","16.3.1","16.3.2","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.1.0","17.1.1","17.1.2","17.2.0","17.2.1","17.3.0","17.4.0","17.4.1","18.0.0","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.1.1","18.2.0","18.3.0","18.4.0","18.5.0","18.6.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.2.0","19.3.0","19.4.0","19.5.0","19.6.0","19.7.0","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.1.0","20.2.0","20.3.0","20.3.1","20.4.0","20.5.0","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","22.0.0","22.0.0.0rc1","22.0.0.0rc2","22.0.1","22.0.2"]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-linuxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-macvtap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-metering-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-ml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-rpc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-sriov-nic-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20230216175503.el8ost"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.0.0-0ubuntu1","2:8.0.0~b1-0ubuntu2","2:8.0.0~b2-0ubuntu4","2:8.0.0~b2-0ubuntu5","2:8.0.0~b2-0ubuntu7","2:8.0.0~b3-0ubuntu1","2:8.0.0~rc1-0ubuntu1","2:8.0.0-0ubuntu1","2:8.1.0-0ubuntu0.16.04.2","2:8.1.2-0ubuntu1","2:8.2.0-0ubuntu1","2:8.3.0-0ubuntu1","2:8.3.0-0ubuntu1.1","2:8.3.0-0ubuntu1.2","2:8.4.0-0ubuntu1","2:8.4.0-0ubuntu2","2:8.4.0-0ubuntu3","2:8.4.0-0ubuntu4","2:8.4.0-0ubuntu5","2:8.4.0-0ubuntu6","2:8.4.0-0ubuntu7.1","2:8.4.0-0ubuntu7.2","2:8.4.0-0ubuntu7.3","2:8.4.0-0ubuntu7.4","2:8.4.0-0ubuntu7.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:11.0.1-0ubuntu1","2:12.0.0~b1-0ubuntu1","2:12.0.0~b1-0ubuntu2","2:12.0.0~b2-0ubuntu1","2:12.0.0~b3-0ubuntu1","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0-0ubuntu1","2:12.0.0-0ubuntu1.1","2:12.0.0-0ubuntu1.2","2:12.0.0-0ubuntu1.3","2:12.0.0-0ubuntu1.4","2:12.0.0-0ubuntu2","2:12.0.0-0ubuntu3","2:12.0.1-0ubuntu1","2:12.0.1-0ubuntu1.1","2:12.0.2-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.5-0ubuntu4","2:12.0.5-0ubuntu5","2:12.0.6-0ubuntu1","2:12.0.6-0ubuntu2","2:12.0.6-0ubuntu3","2:12.1.0-0ubuntu1","2:12.1.1-0ubuntu1","2:12.1.1-0ubuntu2","2:12.1.1-0ubuntu3","2:12.1.1-0ubuntu4","2:12.1.1-0ubuntu7","2:12.1.1-0ubuntu8","2:12.1.1-0ubuntu8.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4","2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2","2:16.0.0-0ubuntu0.20.04.1","2:16.0.0-0ubuntu0.20.04.2","2:16.1.0-0ubuntu1","2:16.1.0-0ubuntu2","2:16.2.0-0ubuntu1","2:16.2.0-0ubuntu2","2:16.2.0-0ubuntu3","2:16.3.0-0ubuntu3","2:16.3.1-0ubuntu1","2:16.3.1-0ubuntu1.1","2:16.3.2-0ubuntu2","2:16.3.2-0ubuntu3","2:16.4.0-0ubuntu2","2:16.4.0-0ubuntu3","2:16.4.1-0ubuntu2","2:16.4.2-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu3","2:16.4.2-0ubuntu4","2:16.4.2-0ubuntu5","2:16.4.2-0ubuntu6","2:16.4.2-0ubuntu6.1","2:16.4.2-0ubuntu6.2","2:16.4.2-0ubuntu6.3","2:16.4.2-0ubuntu6.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:19.0.0-0ubuntu1","2:19.1.0+git2022030313.b072cbf05f-0ubuntu1","2:20.0.0-0ubuntu1","2:20.0.0-0ubuntu2","2:20.0.0-0ubuntu3","2:20.1.0-0ubuntu2","2:20.2.0-0ubuntu1","2:20.3.0-0ubuntu1","2:20.3.0-0ubuntu1.1","2:20.3.1-0ubuntu1","2:20.4.0-0ubuntu1","2:20.5.0-0ubuntu1","2:20.5.0-0ubuntu2","2:20.5.0-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:23.0.0-0ubuntu1","2:24.0.0~b1+git2024011914.5ce17647-0ubuntu1","2:24.0.0~rc1-0ubuntu2","2:24.0.0-0ubuntu1","2:24.0.0-0ubuntu2","2:24.1.0-0ubuntu1","2:24.1.0-0ubuntu1.1","2:24.1.0-0ubuntu1.2","2:24.2.2-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:26.0.0-0ubuntu1","2:26.0.1+git2025070714.71962255de-0ubuntu1","2:26.0.1+git2025070714.71962255de-0ubuntu2","2:27.0.0~rc1-0ubuntu1","2:27.0.0-0ubuntu1","2:27.0.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu2","2:29.0.0~b1+git20260818.132.9aaa6fa-0ubuntu1","2:29.0.0~rc1-0ubuntu1","2:29.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:27.0.0-0ubuntu1","2:28.0.0~b2+git20260121.28.762694d1bd-0ubuntu1","2:28.0.0~rc1-0ubuntu1","2:28.0.0~rc2-0ubuntu1","2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu1.1","2:28.0.2-0ubuntu1"]}],"products":[{"vendor":"red hat","product":"red hat openstack platform 13 (queens) operational tools"},{"vendor":"red hat","product":"red hat openstack platform 16.1"},{"vendor":"red hat","product":"red hat openstack platform 16.2"},{"vendor":"red hat","product":"red hat openstack platform 17.0"},{"vendor":"red hat","product":"red hat openstack platform 17.1"},{"vendor":"red hat","product":"red hat openstack platform 18.0"},{"vendor":"redhat","product":"openstack_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:4283","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web","advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3637","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222270","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3637","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r3jh-qhgj-gvr8","tags":["advisory"]},{"url":"https://pypi.org/project/neutron","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219790","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4283.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3637","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2023-3637","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-3637","title":"Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T12:47:31.531Z","modified":"2025-11-20T17:39:47.319Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-2132","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T12:47:31Z","modified":"2025-11-20T17:39:47Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:14.564249Z"}],"ghsa":[{"id":"GHSA-r3jh-qhgj-gvr8","title":"Denial of service in neutron","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T15:30:25Z","modified":"2023-11-10T05:03:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:19.438667Z"}],"nvd":[{"id":"CVE-2023-3637","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T13:15:10.407Z","modified":"2026-06-17T06:14:31.007Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:08:18.687088Z"}],"osv":[{"id":"GHSA-r3jh-qhgj-gvr8","title":"Denial of service in neutron","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T15:30:25Z","modified":"2026-09-10T03:50:02.577902185Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:55.122811Z"},{"id":"PYSEC-2026-1694","title":"Denial of service in neutron","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2026-07-07T11:45:21.327812Z","modified":"2026-07-07T17:47:07.187540408Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"RHSA-2023:4283","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update","status":"published","published":"2024-09-16T12:31:07Z","modified":"2026-08-01T10:03:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2023-3637","description":"An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.","status":"published","published":"2023-07-25T13:15:00Z","modified":"2026-10-28T01:07:25.252317967Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"}]}}