CVE-2013-1838

Publication date 14 March 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
nova 12.10 quantal
Fixed 2012.2.1+stable-20121212-a99a802e-0ubuntu1.4
12.04 LTS precise
Fixed 2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.4
11.10 oneiric
Fixed 2011.3-0ubuntu6.13
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-1771-1
    • OpenStack Nova vulnerabilities
    • 20 March 2013

Other references