CVE-2014-8124
12.12.2014, 15:59
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openstack | horizon | 2014.1 ≤ 𝑥 < 2014.1.3 |
| openstack | horizon | 2014.2.0 ≤ 𝑥 < 2014.2.1 |
| opensuse | opensuse | 13.1 |
| oracle | solaris | 11.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References