Unrated severityNVD Advisory· Published Oct 29, 2013· Updated Apr 29, 2026
CVE-2013-4261
CVE-2013-4261
Description
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- seclists.org/oss-sec/2013/q3/595nvdPatch
- bugs.launchpad.net/nova/+bug/1215091nvdExploit
- bugzilla.redhat.com/show_bug.cginvdExploitPatch
- rhn.redhat.com/errata/RHSA-2013-1199.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.