Vulnerability Description
Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are able to exceed the allocation limits configured for their accounts/domains. This can be used by an attacker to degrade the infrastructure's resources and lead to denial of service conditions. Users are recommended to upgrade to Apache CloudStack versions 4.20.3.0 or 4.22.0.1, or later, which fixes this issue.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Cloudstack | >= 4.0.0, < 4.20.3.0 |
Related Weaknesses (CWE)
References
- https://lists.apache.org/thread/n8mt5b7wkpysstb8w7rr9f02kc5cq2xmMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/05/09/5
FAQ
What is CVE-2025-69233?
CVE-2025-69233 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are able to exceed the allocation limit...
How severe is CVE-2025-69233?
CVE-2025-69233 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-69233?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Cloudstack.