CVE-2013-1838: OpenStack Compute (Nova) Denial of service… – CVSS 4.0 · Watchpost

← All vulnerabilities

OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function

보통 4.0CVE-2013-1838 · GHSA-63fq-8fp9-vhwq · PYSEC-2013-44 · Published 22/03/2013 · updated 16/06/2026

요약

CVE-2013-1838은(는) nova, essex (openstack), folsom (openstack)에 영향을 주는 보통 (CVSS 4.0) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 2.7%, 전체 취약점의 86.2%보다 높음.
조치: 12.0.0a0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
nova PyPI	`< 12.0.0a0`	`12.0.0a0`
essex openstack	`= 2012.1`	No fix yet
folsom openstack	`= 2012.2`	No fix yet
grizzly openstack	`= 2012.2`	No fix yet

Description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

NVD description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

References

nvd.nist.gov/vuln/detail/CVE-2013-1838 · ADVISORY
openstack/nova commit 9561484 · WEB
openstack/nova commit 9942921 · WEB
openstack/nova commit efaacda · WEB
bugs.launchpad.net/nova/+bug/1125468 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/82877 · WEB
openstack/nova · PACKAGE
pypa/advisory-database · WEB
lists.launchpad.net/openstack/msg21892.html · WEB
review.openstack.org · WEB
review.openstack.org · WEB

nova의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free