Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1838
HistoryMar 14, 2013 - 12:00 a.m.

CVE-2013-1838

2013-03-1400:00:00
ubuntu.com
ubuntu.com
8

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.8%

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does
not properly implement a quota for fixed IPs, which allows remote
authenticated users to cause a denial of service (resource exhaustion and
failure to spawn new instances) via a large number of calls to the
addFixedIp function.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchnova< 2011.3-0ubuntu6.13UNKNOWN
ubuntu12.04noarchnova< 2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.4UNKNOWN
ubuntu12.10noarchnova< 2012.2.1+stable-20121212-a99a802e-0ubuntu1.4UNKNOWN

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.8%