cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nux (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CLOUDSTACK-9464) VR vulnerable to DNs reflection attacks
Date Mon, 22 Aug 2016 14:54:20 GMT
Nux created CLOUDSTACK-9464:
-------------------------------

             Summary: VR vulnerable to DNs reflection attacks
                 Key: CLOUDSTACK-9464
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9464
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Virtual Router
    Affects Versions: 4.9.0, 4.8.0
         Environment: Advanced zones with Security Groups 
            Reporter: Nux


In advanced zones with Security Groups and probably Basic Zones, too, the VR opens the DNS
service to everyone (-j ACCEPT).

As a result Cloudstack VRs are currently used in DNS reflection or amplification attacks.

There is some discussion about this in https://issues.apache.org/jira/browse/CLOUDSTACK-6432

This PR tries to rectify the problem:
https://github.com/apache/cloudstack/pull/1653



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message