CVEvulnerability
CVE-2013-4261
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
Affected configurations
• openstack folsom (<= -)
• openstack grizzly (<= -)
• redhat openstack 3.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-1199.html Vendor Advisory
- http://seclists.org/oss-sec/2013/q3/595 Patch
- https://bugs.launchpad.net/nova/+bug/1215091 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=999164 Exploit, Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=999271 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1199.html Vendor Advisory
- http://seclists.org/oss-sec/2013/q3/595 Patch
- https://bugs.launchpad.net/nova/+bug/1215091 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=999164 Exploit, Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=999271 bugzilla.redhat.com