Every CVE Search/ Get API key

CVE-2012-2101

Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

3.5 LowFix available

CVE-2012-2101 is a low vulnerability (CVSS 3.5) in Openstack Nova, published June 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in nova 12.0.0a0.

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Exploit likelihood

1.46%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
CVE-2012-2101
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
CVE-2012-2101
Updated
2026-11-02
EUVDEUVD-2012-0019 No score

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
EUVD-2012-0019
Updated
2026-11-03
GitHub AdvisoriesGHSA-hq3f-9gf7-73r8 No score

Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
GHSA-hq3f-9gf7-73r8
Updated
2026-11-02
OSV No score

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
CVE-2012-2101
Updated
2026-11-02
OSVDEBIAN-CVE-2012-2101 No score

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
DEBIAN-CVE-2012-2101
Updated
2026-11-02
OSVGHSA-hq3f-9gf7-73r8 No score

Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
GHSA-hq3f-9gf7-73r8
Updated
2026-11-02
OSVPYSEC-2012-36 No score

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

Record
PYSEC-2012-36
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
before 12.0.0a0
12.0.0a0
nova
Debian:12
before 2012.1-2
2012.1-2
nova
Debian:13
before 2012.1-2
2012.1-2
nova
Debian:14
before 2012.1-2
2012.1-2

History

History
WhenChangedSources
2026-11-03affected
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 11 moreShow less
MoveEnter Open