OpenStack Security Advisory

  1. Bug #1215091
  2. Comment #6

Comment 6 for bug 1215091

Revision history for this message
Xavier Queralt (xqueralt-deactivatedaccount) wrote : Re: Some sequence of characters in console-log can DoS nova-compute

Yes, the problem only appears in grizzly (and probably folsom) where the qpid implementation wasn't updated to send messages bigger than 65KB

An easy way to reproduce it is as follows:

1. Start a new instance
2. From inside the instance fill the console log (/dev/ttyS0) with as much text as possible (to make the log bigger than 65KB)
3. Ask for the full console-log (either from novaclient or horizon), which should fail with a 500 - InternalError
  - repeat #3 for at least "rpc_conn_pool_size" times until the call hangs.
4. nova-compute has no more connections in the pool and cannot be accessed