CVE-2013-1838
No CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days. Fixed in nova 12.0.0a0.
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- openstack:essex
- openstack:folsom
- openstack:grizzly
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-63fq-8fp9-vhwq | PyPI | nova | <12.0.0a0 | 12.0.0a0 |
| PYSEC-2013-44 | PyPI | nova | <12.0.0a0 | 12.0.0a0 |