VYPR
← All advisories
High severityNVD Advisory· Published Mar 22, 2013· Updated Jun 16, 2026

CVE-2013-1838

CVE-2013-1838

Description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
novaPyPI
< 12.0.0a012.0.0a0

Affected products

7
  • OpenStack/Essex
    cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*
  • OpenStack/Folsom
    cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*
  • OpenStack/Grizzly
    cpe:2.3:a:openstack:grizzly:2012.2:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux3 versions
    cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:pypi/nova
    Range: < 12.0.0a0

Patches

Vulnerability mechanics

References

23

News mentions

0

No linked articles in our index yet.