Every CVE Search/ Get API key

CVE-2013-1838

OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function

4.0 MediumFix available

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Exploit likelihood

2.74%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
CVE-2013-1838
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
CVE-2013-1838
Updated
2026-11-02
EUVDEUVD-2013-0023 No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
EUVD-2013-0023
Updated
2026-11-03
GitHub AdvisoriesGHSA-63fq-8fp9-vhwq 7.1

OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
GHSA-63fq-8fp9-vhwq
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVGHSA-63fq-8fp9-vhwq 7.1

OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
GHSA-63fq-8fp9-vhwq
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVRHSA-2013:0709 7.6

Red Hat Security Advisory: openstack-nova security and bug fix update

Record
RHSA-2013:0709
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSV No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
CVE-2013-1838
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1838 No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
DEBIAN-CVE-2013-1838
Updated
2026-11-02
OSVPYSEC-2013-44 No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Record
PYSEC-2013-44
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
 before 12.0.0a0
12.0.0a0
nova
Debian:12
 before 2012.1.1-15
2012.1.1-15
nova
Debian:13
 before 2012.1.1-15
2012.1.1-15
nova
Debian:14
 before 2012.1.1-15
2012.1.1-15
openstack-nova
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-api
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-cert
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-common
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-compute
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-console
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
Show 6 moreShow less
Affected packages
PackageAffectedFixed
openstack-nova-doc
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-network
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-objectstore
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-scheduler
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-volume
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
python-nova
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1838 is a medium vulnerability (CVSS 4.0) in Openstack Essex, published March 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. Fixed in nova 12.0.0a0.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open