CVE-2012-2101
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
CVE-2012-2101 is a low vulnerability (CVSS 3.5) in Openstack Nova, published June 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in nova 12.0.0a0.
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
Exploit likelihood
What each source reports
NVD Score used
3.5
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
CVE-2012-2101- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
CVE-2012-2101- Updated
- 2026-11-02
EUVDEUVD-2012-0019 No score
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
EUVD-2012-0019- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hq3f-9gf7-73r8 No score
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
GHSA-hq3f-9gf7-73r8- Updated
- 2026-11-02
OSV No score
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
CVE-2012-2101- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2101 No score
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
DEBIAN-CVE-2012-2101- Updated
- 2026-11-02
OSVGHSA-hq3f-9gf7-73r8 No score
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
GHSA-hq3f-9gf7-73r8- Updated
- 2026-11-02
OSVPYSEC-2012-36 No score
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.
- Record
PYSEC-2012-36- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
osvdb.org/81641
github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
ubuntu.com/usn/usn-1438-1
lists.launchpad.net/openstack/msg10268.html
exchange.xforce.ibmcloud.com/vulnerabilities/75243
Show 11 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
secunia.com/advisories/49048
bugs.launchpad.net/nova/+bug/969545
secunia.com/advisories/49034
nvd.nist.gov/vuln/detail/CVE-2012-2101
github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-36.yaml
github.com/advisories/GHSA-hq3f-9gf7-73r8
security-tracker.debian.org/tracker/CVE-2012-2101
github.com/openstack/nova