NVD

Id
37980  
Name
CVE-2013-1838  
Description
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2013-06-04  
Seq
2013-1838  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193948 37980 CVE-2013-1838 RHSA-2013:0709  View
193949 37980 CVE-2013-1838 USN-1771-1  View
193950 37980 CVE-2013-1838 [oss-security] 20130314 [OSSA 2013-008] Nova DoS by allocating all Fixed IPs (CVE-2013-1838)  View
193951 37980 CVE-2013-1838 58492  View
193952 37980 CVE-2013-1838 nova-fixedips-dos(82877)  View
193953 37980 CVE-2013-1838 https://bugs.launchpad.net/nova/+bug/1125468  View
193954 37980 CVE-2013-1838 https://bugzilla.redhat.com/show_bug.cgi?id=919648  View
193955 37980 CVE-2013-1838 [openstack] 20130314 [OSSA 2013-008] Nova DoS by allocating all Fixed IPs (CVE-2013-1838)  View
193956 37980 CVE-2013-1838 https://review.openstack.org/#/c/24451/  View
193957 37980 CVE-2013-1838 https://review.openstack.org/#/c/24452/  View
193958 37980 CVE-2013-1838 https://review.openstack.org/#/c/24453/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20435 JVNDB-2013-002010 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 OpenStack Nova Grizzly、Folsom、および Essex は、固定 IP 用のクオータを適切に実装しないため、サービス運用妨害 (リソースの枯渇および新しいインスタンス作成の失敗) 状態にされる脆弱性が存在します。 CVE-2013-1838 61780 CVE-2013-1838 37980 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002010.html 2013-03-15 2013-04-11 View