nova: denial of service
| Package(s): | nova | CVE #(s): | CVE-2012-1585 | ||||||||
| Created: | March 29, 2012 | Updated: | April 9, 2012 | ||||||||
| Description: | From the Ubuntu advisory: Dan Prince discovered that Nova did not properly perform input validation on the length of server names. An authenticated attacker could issue requests using long server names to exhaust the storage resources containing the Nova API log file. | ||||||||||
| Alerts: |
| ||||||||||