NVD

Id
39834  
Name
CVE-2013-4185  
Description
Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-29  
Modified Date
2013-10-30  
Seq
2013-4185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202631 39834 CVE-2013-4185 RHSA-2013:1199  View
202632 39834 CVE-2013-4185 [oss-secuirty] 20130806 [OSSA 2013-020] Denial of Service in Nova network source security groups (CVE-2013-4185)  View
202633 39834 CVE-2013-4185 https://bugs.launchpad.net/nova/+bug/1184041  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23385 JVNDB-2013-004960 OpenStack Compute および Havana におけるサービス運用妨害 (DoS) の脆弱性 OpenStack Compute (Nova) および Havana は、ネットワークソースセキュリティグループポリシーの更新を適切に処理しないため、サービス運用妨害 (nova-network の消費) 状態にされる脆弱性が存在します。 CVE-2013-4185 64127 CVE-2013-4185 39834 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004960.html 2013-09-03 2013-10-31 View