NVD

Id
39894  
Name
CVE-2013-4261  
Description
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-29  
Modified Date
2013-10-30  
Seq
2013-4261  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202917 39894 CVE-2013-4261 RHSA-2013:1199  View
202918 39894 CVE-2013-4261 [oss-security] 20130912 [OSSA 2013-026] Potential denial of service on Nova when using Qpid (CVE-2013-4261)  View
202919 39894 CVE-2013-4261 https://bugs.launchpad.net/nova/+bug/1215091  View
202920 39894 CVE-2013-4261 https://bugzilla.redhat.com/show_bug.cgi?id=999164  View
202921 39894 CVE-2013-4261 https://bugzilla.redhat.com/show_bug.cgi?id=999271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23386 JVNDB-2013-004961 OpenStack Compute Folsom および Grizzly におけるサービス運用妨害 (DoS) の脆弱性 OpenStack Compute (Nova) Folsom および Grizzly は、RPC バックエンドに Apache Qpid を使用している場合、メッセージ中に発生するエラーを適切に処理しないため、サービス運用妨害 (コネクションプールの消費) 状態にされる脆弱性が存在します。 CVE-2013-4261 64203 CVE-2013-4261 39894 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004961.html 2013-09-03 2013-10-31 View