CVE-2013-1838 - CVE House
Back to Database
Status published Medium CVE-2013-1838

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does...

Vulnerability Description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1838

Credits & Attribution

No credits recorded in the NVD database.

References

More from openstack

View All →
CVE-2022-47951
An issue was discovered in OpenStack Cinder before 19.1.2, 20.x...
Unknown 0
CVE-2022-47950
An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x...
Unknown 0
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4...
Medium 6.1
CVE-2022-37394
An issue was discovered in OpenStack Nova before 23.2.2, 24.x...
Low 3.3
CVE-2021-40797
An issue was discovered in the routes middleware in OpenStack...
Medium 6.5

Affected Vendor

Affected Software

essex, folsom, grizzly, ubuntu linux
Vulnerable Versions:
2012.1, 2012.2, 11.10, 12.04, 12.10

Timeline

Official Publish: March 22nd, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.