VDB
CVE-2013-4261
CVE-2013-4261
PUBLISHED
CVSS 3.5 LOW
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
EPSS 1.74% · 77.5th percentile
Risk Scores
CVSS 2.0
3.5
EPSS Score
1.74%
77.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redhat | openstack | 3.0 |
| openstack | folsom | 0 |
| openstack | grizzly | 0 |
| n/a | n/a | n/a |
Timeline
- Oct 29, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
References
- https://bugzilla.redhat.com/show_bug.cgi?id=999271 url
- https://bugs.launchpad.net/nova/+bug/1215091 url
- [oss-security] 20130912 [OSSA 2013-026] Potential denial of service on Nova when using Qpid (CVE-2013-4261) mailing-list
- RHSA-2013:1199 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=999164 url
- https://nvd.nist.gov/vuln/detail/CVE-2013-4261 advisory