Comment 8 for bug 985184

Revision history for this message
Robert Clark (robert-clark) wrote :

Title: Security groups fail to be set correctly
Impact: High
Reporter: HP Cloud Services <email address hidden>
Products: Nova
Affects: All versions

Description:
HP Cloud Services reported a vulnerability in Nova API handling when a security group is created via the API using a protocol defined in the incorrect case i.e 'TCP' rather than 'tcp' causes a later string comparison to fail. This leads to Security Groups not being set correctly.

Once the Nova DB has been polluted with the incorrect case any subsequent modifications to the security group will also fail. When the patch is applied the DB entries must be corrected to resume normal operations.