p PatchFirst

CVE-2013-4185

CVE-2013-4185

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

EPSS 2.1% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nova Debian:12

    Affected ranges
    • ECOSYSTEM: < 2013.1.2-3

    Update to 2013.1.2-3

  • nova Debian:13

    Affected ranges
    • ECOSYSTEM: < 2013.1.2-3

    Update to 2013.1.2-3

  • nova Debian:14

    Affected ranges
    • ECOSYSTEM: < 2013.1.2-3

    Update to 2013.1.2-3

  • nova PyPI

    Affected ranges
    • ECOSYSTEM: < 12.0.0a0

    Update to 12.0.0a0

Original sources

Check your server →